Lucene search
+L

974 matches found

CNVD
CNVD
added 2018/02/26 12:0 a.m.3 views

Arbitrary File Read Vulnerability in FineReport Version 8.0

FineReport reporting software is a pure Java written , data display reports and data entry forms functions in one enterprise-class web reporting tools . FineReport 8.0 version of the existence of arbitrary file read vulnerability, an attacker can be exploited to read any file on the site...

6.9AI score
SaveExploits0
OSV
OSV
added 2018/02/12 7:29 p.m.6 views

CVE-2017-13243

A information disclosure vulnerability in the Android system ui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991...

7.5CVSS7.3AI score0.00594EPSS
SaveExploits1References2
CNVD
CNVD
added 2018/02/06 12:0 a.m.7 views

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2018-03846)

Android is the United States Google Google and the Open Handheld Alliance referred to as OHA jointly developed a set of Linux-based open source operating system. keyStore service is one of the Java data certificate management service. An elevation of privilege vulnerability exists in the KeyStore...

7.8CVSS7.5AI score0.00548EPSS
SaveExploits3References1
CNVD
CNVD
added 2018/01/22 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component (CNVD-2018-01706)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

8.1CVSS6.8AI score0.01506EPSS
SaveExploits0References1
OSV
OSV
added 2018/01/18 2:29 a.m.7 views

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

6.1CVSS7.3AI score0.01125EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/18 2:29 a.m.5 views

CVE-2018-2716

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network...

6.1CVSS7.3AI score0.01104EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/18 2:29 a.m.4 views

CVE-2018-2712

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

6.1CVSS7.3AI score
SaveExploits0References3
OSV
OSV
added 2018/01/18 2:29 a.m.6 views

CVE-2018-2613

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Login. Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus...

8.2CVSS5.8AI score0.01198EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/01/18 2:0 a.m.3 views

CVE-2018-2660

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

5.5AI score0.01055EPSS
SaveExploits3References3
OSV
OSV
added 2018/01/12 11:29 p.m.6 views

CVE-2017-13199

In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.02173EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/12 11:29 p.m.5 views

CVE-2017-13200

An information disclosure vulnerability in the Android media framework av related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References2
OSV
OSV
added 2018/01/12 11:29 p.m.4 views

CVE-2017-13184

In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.2AI score0.0022EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/12 11:29 p.m.7 views

CVE-2017-13185

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471...

9.1CVSS5.8AI score0.00508EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/01/08 12:0 a.m.6 views

Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-00636)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaFramework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A...

7.8CVSS7.4AI score0.0022EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/08 12:0 a.m.8 views

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-00630)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A remote...

7.8CVSS6.7AI score0.02173EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/12/20 12:0 a.m.6 views

EMC Isilon OneFS NFS Export Security Bypass Vulnerability

EMC Isilon OneFS is a distributed file system that supports EMC Isilon Horizontally Scalable Storage System from EMC Corporation. The system combines the three layers of a traditional storage architecture file system, volume manager and data protection into a single unified software layer to crea...

6.5CVSS6.8AI score0.00914EPSS
SaveExploits0References1
OSV
OSV
added 2017/12/06 2:29 p.m.2 views

CVE-2017-0874

A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932...

6.5CVSS5.8AI score0.00428EPSS
SaveExploits0References2
OSV
OSV
added 2017/12/06 2:29 p.m.6 views

CVE-2017-0879

An information disclosure vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
OSV
OSV
added 2017/12/06 2:29 p.m.3 views

CVE-2017-13154

An elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573...

7.8CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2017/12/06 2:29 p.m.6 views

CVE-2017-13149

An information disclosure vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872...

9.1CVSS5.8AI score0.00462EPSS
SaveExploits0References1
Rows per page
Query Builder