Lucene search
+L

471 matches found

Openbugbounty
Openbugbounty
•added 2018/06/27 11:20 p.m.•15 views

dynamo-dunkerque.com XSS vulnerability

Open Bug Bounty ID: OBB-637901 Description| Value ---|--- Affected Website:| dynamo-dunkerque.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/06/07 4:16 a.m.•11 views

dynamo-dresden.de XSS vulnerability

Open Bug Bounty ID: OBB-628234 Description| Value ---|--- Affected Website:| dynamo-dresden.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
nodejs
nodejs
•added 2018/05/15 11:28 p.m.•24 views

Malicious Package

Overview Version 0.0.3 of dynamo-schema contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.3 of this module is found install...

6.9AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2017/01/27 10:59 p.m.•15 views

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

4.3CVSS7.3AI score0.01116EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/27 12:00 a.m.•6 views

CVE-2017-3296: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

4.3CVSS5.8AI score0.01116EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/01/20 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle Commerce Platform

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. An unspecified vulnerability exists in Oracle Commerce Platform. An attacker could exploit the vulnerability by leveraging the 'HTTP' protocol to compromise the 'Dynamo Application Framewor...

4.3CVSS6.7AI score0.01116EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/04/23 12:00 a.m.•14 views

Oracle Commerce Platform A vulnerability exists in the Commerce Platform component

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. A security vulnerability exists in the Dynamo Application Framework - HTML Admin User Interface subcomponent of the Oracle Commerce Platform component of Oracle Commerce Platform. A remote...

4.3CVSS6.7AI score0.01501EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2015/04/16 4:00 p.m.•44 views

CVE-2015-0510

Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface...

5.6AI score0.01501EPSS
SaveExploits0References1
CVE
CVE
•added 2015/04/16 4:00 p.m.•64 views

CVE-2015-0510

Oracle Commerce Platform (9.4, 10.0, 10.2) is affected by a vulnerability in the Dynamo Application Framework – HTML Admin User Interface. The issue, described in connected CNVD data, allows a remote attacker to update, insert, or delete data, compromising data integrity. The root cause details a...

4.3CVSS5.8AI score0.01501EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2015/04/16 12:00 a.m.•3 views

PT-2015-4676

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 9.4 through 10.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via vectors related to the Dynamo Application Framework - HTML Admin User Interface...

4.3CVSS0.01501EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/16 12:00 a.m.•5 views

CVE-2015-0510: Undefined Security Weakness

Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface...

4.3CVSS6AI score0.01501EPSS
SaveExploits0References1
Rows per page
Query Builder