Lucene search
K

10505 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.1 views

The vulnerability of the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application allows a perpetrator to gain unauthorized access to protected information, to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information, to modif...

6.5CVSS6.9AI score0.00871EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.1 views

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to...

6.1CVSS6.8AI score0.00948EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.2 views

The vulnerability of the PIA Grids component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the PIA Grids component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to modify, add, ...

6.1CVSS6.8AI score0.0101EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.2 views

Vulnerability of the MySQL Server component: Security: Roles of the database management system, allowing attackers to access, modify, add, or delete data.

Vulnerability of the MySQL Server component: Security: Roles of the database management system are related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain access to modify, add, or delete data...

4CVSS6.4AI score0.01259EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.3 views

The vulnerability of the Kernel component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Kernel component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

3.9CVSS6.3AI score0.00337EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.3 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing an attacker to gain access to modify data.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data...

7.8CVSS5.5AI score0.01897EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.1 views

The vulnerability of the Utility component in Oracle Solaris’ operating systems allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Utility component in Oracle Solaris systems is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the SSH network protocol...

3CVSS6.3AI score0.00715EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2020/11/19 12:0 a.m.7 views

Red Hat Hibernate ORM SQL Injection Vulnerability

Red Hat Hibernate ORM is an object/relational mapping ORM framework for writing applications from Red Hat. Hibernate ORM suffers from a SQL injection vulnerability that can be exploited by an attacker to read or modify data via annotations in Hibernate ORM using SQL injection...

7.4CVSS7.2AI score0.02907EPSS
Exploits0References42
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:0 a.m.3 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious actor to gain unauthorized access to protected information and to modify, add, or delete data.

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to errors in restricting XML links to external objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and to modify, add, or...

6.8CVSS6.5AI score0.00586EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:0 a.m.3 views

The vulnerability of the transmission function for programmatically defined system files in Cisco SD-WAN allows a perpetrator to enhance their privileges and gain access to modify, add, or delete data.

The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to modify, add, or delete data...

7.8CVSS5.5AI score0.00185EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2020/11/17 2:15 a.m.18 views

CVE-2020-14389

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have...

8.1CVSS7.9AI score0.00812EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.2 views

The vulnerability of the User Interface component of Oracle Communications Diameter Signaling Router software allows a attacker to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the User Interface component of Oracle Communications Diameter Signaling Router software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, add, or delete data...

6.1CVSS6.9AI score0.01153EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.4 views

The vulnerability of the User Interface component of Oracle Communications Diameter Signaling Router software allows a attacker to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the User Interface component of Oracle Communications Diameter Signaling Router software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, add, or delete data...

5.4CVSS6.6AI score0.00718EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/11/15 12:0 a.m.1 views

SQL Injection Vulnerability in Shield Spirit Voting Voter System for Front-end User Modification Data

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

7.6AI score
Exploits0
NVD
NVD
added 2020/11/13 4:15 p.m.14 views

CVE-2020-25165

BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the ...

7.5CVSS7.6AI score0.01695EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.4 views

The vulnerability of the Analytics Actions component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Analytics Actions component of the Oracle Business Intelligence Enterprise Edition software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to remotely access and modify, add, or delete data using the HTTP protocol...

8.2CVSS7.7AI score0.08221EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.3 views

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, ...

8.2CVSS7.7AI score0.01415EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.2 views

The vulnerability of the Web Services component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

8.8CVSS7.2AI score0.01939EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.3 views

The vulnerability of the E-Business Suite component XDO in the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the E-Business Suite component XDO in the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add,...

8.5CVSS7.7AI score0.01282EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:0 a.m.3 views

The vulnerability of the Console component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

10CVSS8.1AI score0.9927EPSS
Exploits9References5Affected Software1
Rows per page
Query Builder