Lucene search
K

10502 matches found

Veracode
Veracode
added 2019/05/02 6:9 a.m.27 views

Command Injection

Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...

9.8CVSS9.9AI score0.0413EPSS
Exploits0References14Affected Software1
Veracode
Veracode
added 2019/05/02 6:9 a.m.33 views

Command Injection

Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...

9.8CVSS9.9AI score0.04707EPSS
Exploits0References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:39 a.m.26 views

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Libraries component to modify data and cause a denial of service condition and disclosure information affecting confidentiality, integrity, and availability of the application...

9.6CVSS8.7AI score0.06715EPSS
Exploits0References28Affected Software4
Veracode
Veracode
added 2019/05/02 5:29 a.m.21 views

Privilege Escalation

Oracle MySQL Server and MariaDB are vulnerable to privilege escalation attacks. A local user can exploit a flaw in the Federated component to partially modify data and cause denial of service and disclosure of information...

4.7CVSS5.6AI score0.03764EPSS
Exploits0References29Affected Software4
Veracode
Veracode
added 2019/05/02 5:28 a.m.30 views

Man-In-The-Middle (MitM)

samba is vulnerable to man-in-the-middle vulnerability. This allows a remote attacker to modify the data sent between a Samba server and a client that causes a LDAP protocol-downgrade...

5.9CVSS6.3AI score0.0938EPSS
Exploits0References42Affected Software11
Veracode
Veracode
added 2019/05/02 5:28 a.m.27 views

Man-In-The-Middle (MitM)

Samba is vulnerable to man-in-the-middle vulnerability. This allows a remote attacker to spoof SMB clients by modifying the data sent between a Samba server and a client...

5.9CVSS6.3AI score0.10269EPSS
Exploits0References42Affected Software11
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.2 views

The vulnerability of the sub-component Application Server of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Server sub-component of the PeopleSoft Enterprise PT PeopleTools business application suite from Oracle PeopleSoft Products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

6.8CVSS6.8AI score0.01146EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.2 views

The vulnerability of the Fluid sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Fluid sub-component of the PeopleSoft Enterprise PeopleTools business application suite, developed by Oracle PeopleSoft Products, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify...

4.3CVSS5.8AI score0.01043EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.2 views

The vulnerability of the Candidate Gateway sub-component of the PeopleSoft Enterprise HRMS component of the Oracle PeopleSoft Products allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Candidate Gateway sub-component of the PeopleSoft Enterprise HRMS component of the Oracle PeopleSoft products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete dat...

6.1CVSS6.7AI score0.0098EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.4 views

The vulnerability of the WLS Core Components of Oracle WebLogic Server application servers allows attackers to modify, add, or delete data.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to lack of access control mechanisms. Exploiting this vulnerability allows an attacker to remotely modify, add, or delete data using the HTTP protocol...

5CVSS6.1AI score0.00826EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.3 views

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management module – allows an attacker to access, modify, add, or delete data, and to cause a partial service disruption.

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management software – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, and...

6.5CVSS5.9AI score0.01053EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.3 views

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

8.5CVSS7.5AI score0.01287EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.5 views

The vulnerability of the WLS Core Components of Oracle WebLogic Server application servers allows attackers to modify, add, or delete data.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

8.5CVSS6.2AI score0.33405EPSS
Exploits2References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.4 views

The vulnerability of the BI Publisher Security sub-component, a reporting tool developed by BI Publisher (formerly XML Publisher), allows an attacker to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component, a reporting tool from BI Publisher formerly XML Publisher, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the...

8.5CVSS7.2AI score0.00987EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.4 views

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

5CVSS5.9AI score0.01003EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.2 views

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or...

5CVSS5.9AI score0.01043EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.2 views

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.5CVSS7.5AI score0.01287EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.2 views

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component of the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

8.5CVSS7.5AI score0.01287EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.2 views

The vulnerability of the SQR sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Products suite for business applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SQR sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft Products is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or...

9.4CVSS7.6AI score0.01274EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.5 views

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using...

7.2CVSS7.1AI score0.92183EPSS
Exploits4References3Affected Software1
Rows per page
Query Builder