Lucene search
K

10502 matches found

CNVD
CNVD
added 2019/01/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle FLEXCUBE Direct Banking (CNVD-2019-37403)

Oracle FLEXCUBE Direct Banking enables banks to deliver a tailored, portal-based, rich online customer experience based on demographics and market segments. A security vulnerability exists in Oracle FLEXCUBE Direct Banking 12.0.2. An attacker could exploit the vulnerability to cause unauthorized...

6.1CVSS8.2AI score0.01123EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Hospitality Simphony

Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle Corporation, of which Hospitality Simphony is a cloud-based hotel management component. A security vulnerability exists in Oracle Hospitality Simphony 2.10. An attacker could use this...

7.7CVSS8.6AI score0.01669EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28448)

Oracle E-Business Suite E-Business Suite is a fully integrated set of Oracle's global business management software. marketing is one of the Internet-based marketing management components. A security vulnerability exists in the User Interface subcomponent of the Marketing component of Oracle...

8.2CVSS8.6AI score0.0153EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28451)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. partner management is one of the...

8.2CVSS8.7AI score0.0153EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28439)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. A securi...

4.7CVSS8.4AI score0.0124EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28466)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

6.5CVSS8.4AI score0.01216EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28458)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

4.7CVSS8.4AI score0.0124EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-26716)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Replication subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.13 and earlier. An...

5.5CVSS7.5AI score0.02091EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28453)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. performance Management is one of...

9.1CVSS8.7AI score0.02012EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/16 12:0 a.m.3 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28450)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. partner management is one of the...

8.2CVSS8.7AI score0.0153EPSS
Exploits0References1
OSV
OSV
added 2019/01/16 12:0 a.m.2 views

UBUNTU-CVE-2019-2534

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...

7.1CVSS6.7AI score0.02113EPSS
Exploits0References4
Veracode
Veracode
added 2019/01/15 8:55 a.m.22 views

Authorization Bypass

python-keystoneclient is vulnerable to authorization bypass. An attacker with direct write access to the memcache backend is able to insert malicious data and bypass the encryption to tamper the encrypted data or modify data in memcached. Only setups that use memcache caching in the Keystone...

9.8CVSS9.2AI score0.01764EPSS
Exploits1References13Affected Software1
Positive Technologies
Positive Technologies
added 2019/01/15 12:0 a.m.2 views

PT-2019-1255 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.13 and prior Description: The issue is related to errors in access control within the Server component of Oracle MySQL. It allows a remote attacker to gain unauthorized access to protected data using network protocol...

7.1CVSS6.8AI score0.04741EPSS
Exploits0References493
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.2 views

The vulnerability of the Cisco Data Center Network Manager system arises from errors in checking user requests in the management interface. This allows attackers to disclose or modify sensitive information that is protected by the system.

The vulnerability of the Cisco Data Center Network Manager system relates to errors in checking user requests in the management interface. Exploiting this vulnerability can allow a malicious actor to disclose or modify sensitive information...

8.5CVSS7.5AI score0.05406EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2019/01/10 9:4 a.m.4 views

jenkins: forced migration of user records (SECURITY-1072)

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into...

8.2CVSS5.8AI score0.06762EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.4 views

The vulnerability in the local database of the Cisco Energy Management Suite allows a perpetrator to disclose or modify protected information.

The vulnerability of the configuration of the local database in the Cisco Energy Management Suite is related to the use of pre-installed registration data. Exploiting this vulnerability could allow an attacker to disclose or modify the protected information...

7.1CVSS7.1AI score0.00327EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2018/12/20 12:0 a.m.2 views

Logic flaws exist in the OA system of Shandong Branch of Unicom Systems Integration Co.

Ltd. Shandong Province Branch is a wholly-owned listed branch of China Unicom, with a registered capital of RMB 550 million yuan at its headquarters, which is a large state-owned high-tech enterprise. There is a logic flaw vulnerability in the OA system of Unicom System Integration Ltd Shandong...

6.8AI score
Exploits0
CNVD
CNVD
added 2018/12/11 12:0 a.m.1 views

CloudBees Jenkins Data Modification Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A data...

8.2CVSS6.9AI score0.06762EPSS
Exploits1References1
NVD
NVD
added 2018/12/10 2:29 p.m.21 views

CVE-2018-1000863

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into...

8.2CVSS8.6AI score0.06762EPSS
Exploits1References4
OSV
OSV
added 2018/12/10 2:29 p.m.24 views

CVE-2018-1000863

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into...

8.2CVSS6.4AI score
Exploits0References4
Rows per page
Query Builder