Lucene search
+L

3421 matches found

CNVD
CNVD
added 2015/07/29 12:0 a.m.0 views

WordPress Unite Gallery Lite Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Unite Gallery is a graphics and video gallery plugin for WordPress. Unite Gallery Lite 1.4.6 and other versions suffer from ...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2015/07/16 12:0 a.m.3 views

UBUNTU-CVE-2015-2648

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML...

4CVSS6.7AI score0.04328EPSS
SaveExploits0References4
OSV
OSV
added 2015/07/16 12:0 a.m.4 views

UBUNTU-CVE-2015-2611

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML...

4CVSS6.9AI score0.03109EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2015/07/07 12:0 a.m.19 views

ManageEngine Password Manager Pro SQLi Vulnerability (Jul 2015)

ManageEngine Password Manager Pro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.8AI score
SaveExploits0References2
CNVD
CNVD
added 2015/06/17 12:0 a.m.3 views

Cisco Prime Collaboration Manager SQL Injection Vulnerability

Cisco Prime Collaboration is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid deployment of...

5CVSS8.1AI score0.0186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2015/06/11 12:0 a.m.16 views

PT-2015-5808 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to exploit it via vectors related to DML...

10CVSS6.9AI score0.6773EPSS
SaveExploits29References359
CNVD
CNVD
added 2015/06/09 12:0 a.m.29 views

SysAid Help Desk SQL Injection Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SQL injection vulnerability in multiple scripts in SysAid Help Desk allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

6.5CVSS8.1AI score0.01809EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2015/05/27 12:0 a.m.28 views

osCMax e-commerce/shopping-cart Multiple Vulnerabilities

osCMax is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oscmax:oscmax"; ifdescription...

7.5CVSS6.6AI score0.02861EPSS
SaveExploits14References4
Tenable Nessus
Tenable Nessus
added 2015/05/11 12:0 a.m.88 views

Magento Mage_Adminhtml_Block_Report_Search_Grid Class 'popularity' Parameter SQLi

The Magento application running on the remote web server is affected by a SQL injection vulnerability due to failing to properly sanitized the user-supplied range inputs to the 'popularity' parameter of the MageAdminhtmlBlockReportSearchGrid class. An unauthenticated, remote attacker can exploit...

6.5CVSS6.4AI score0.56686EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2015/05/06 12:0 a.m.9 views

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability of the MySQL database management system allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data accessibility by using the DML subcomponent...

2.8CVSS6.5AI score0.02617EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/05/06 12:0 a.m.7 views

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability in the MySQL database management system allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data accessibility by using the InnoDB subcomponent: DML...

4CVSS6.3AI score0.05383EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/04/23 12:0 a.m.8 views

Vulnerability in Oracle E-Business Suite Application Object Library Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

2.6CVSS6.8AI score0.01515EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.3 views

Vulnerability in Oracle Sun Systems Product Suite Solaris Component

Oracle Sun Solaris is a UNIX operating system. A security vulnerability exists in the Oracle Sun Solaris libelfsign subcomponent, which can be exploited by a local attacker to manipulate data in a way that affects system confidentiality, availability, and integrity...

4.4CVSS6.6AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.6 views

Unspecified Vulnerability in Oracle E-Business Suite AMP Application Management Pack Component

Oracle E-Business Suite AMP is a fully integrated suite of global business management software. An unspecified security vulnerability exists in the EBS Plugin subcomponent of the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP, which can be exploit...

1.2CVSS6.9AI score0.00348EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.6 views

Unspecified Vulnerability in Oracle PeopleSoft Product PeopleSoft Enterprise Portal Interaction Hub Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions.PeopleSoft Enterprise Portal Interaction Hub is one of the portal components that provides content and collaboration capabilities. A security vulnerability exists in the Enterprise Portal subcomponent of the PeopleSoft...

4.3CVSS6.8AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware Access Manager Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Authentication Engine subcomponent of the Oracle Access Manager component of Oracle Fusion Middleware, which can be exploited by remote attackers to manipulate...

7CVSS6.8AI score0.01473EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.7 views

Unspecified Vulnerability in Oracle PeopleSoft Product PeopleSoft Enterprise PeopleTools Component (CNVD-2015-02602)

Oracle PeopleSoft is a suite of enterprise human capital management solutions.PeopleSoft Enterprise PeopleTools is a tool and technology platform component that transforms the way organizations manage, use, and maintain PeopleSoft software. A security vulnerability exists in the PIA Core Technolo...

3.5CVSS6.8AI score0.01188EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.7 views

Unspecified Vulnerability in Suite Agile Engineering Data Management Component in Oracle Supply Chain

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the BAS - Base Component subcomponent of the Oracle Agile Engineering Data Management compone...

4.9CVSS6.8AI score0.01284EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Java SE and JavaFX JavaFX Subcomponent

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. javaFX provides users with a framework for developing Rich Internet Applications RIAs using the JavaFX programming language. An unspecified security vulnerability...

9.3CVSS6.7AI score0.04308EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/19 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Retail Applications Retail Central Office Component

Oracle Retail Applications is a suite of retail application store solutions. A security vulnerability exists in the Oracle Retail Central Office component of Oracle Retail Applications, which can be exploited by remote attackers to manipulate data and compromise system integrity...

4.3CVSS6.8AI score0.01498EPSS
SaveExploits0References1
Rows per page
Query Builder