Lucene search
+L

2035 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.9 views

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...

7.5CVSS7.3AI score0.0058EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.6 views

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of Oracle Marketing’s Marketing Administration component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to gain full control over the application using the HTTP protocol...

9.4CVSS6.8AI score0.01548EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.5 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.10 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.9 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.8 views

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...

8.2CVSS7.4AI score0.00849EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.11 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.01023EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.11 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.10 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.13 views

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

8.5CVSS6.8AI score0.00933EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/04/22 8:15 p.m.4 views

CVE-2021-0265

An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the...

8.1CVSS7.4AI score0.02546EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/22 8:15 p.m.14 views

Cross site scripting

A Cross-site Scripting XSS vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attacker has the same privileges as...

9.3CVSS8AI score0.01171EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.24 views

CVE-2021-0265 Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.

An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the...

8.1CVSS8.6AI score0.02546EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/22 12:0 a.m.5 views

Juniper Networks AppFormix Overview 操作系统命令注入漏洞

Juniper Networks AppFormix Overview is an application from Juniper Networks, Inc. Operators of software-defined data centers can use one toolset to view operational performance and infrastructure resources. Juniper Networks AppFormix Overview has a security vulnerability that could be exploited b...

10CVSS5.6AI score0.02546EPSS
SaveExploits0References2
wpexploit
wpexploit
added 2021/03/23 12:0 a.m.148 views

Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

An Improper Access Control vulnerability was discovered in the plugin. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource. Even with the maximu...

10CVSS1.5AI score0.09733EPSS
SaveExploits2References1
0day.today
0day.today
added 2021/03/19 12:0 a.m.52 views

SOYAL 701 Server 9.0.1 - Insecure Permissions Vulnerability

Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1 190322 8.0.6 181227...

7.4AI score
SaveExploits0
NVD
NVD
added 2021/03/10 7:15 p.m.28 views

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

8.8CVSS0.01069EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/03/10 6:14 p.m.31 views

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

9AI score0.01069EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.12 views

The vulnerability of the components of Oracle WebLogic Server’s application service servers allows a perpetrator to gain full control over the application.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application through the use of the HTTP protocol...

9.8CVSS7.7AI score0.05469EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.6 views

The vulnerability of Core Components of the Oracle Coherence data processing software allows a hacker to gain full control over the application.

The vulnerability of Oracle Coherence’s software-based data processing components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application by using the IIOP and T3 network protocols...

10CVSS7.7AI score0.74753EPSS
SaveExploits4References2Affected Software2
Rows per page
Query Builder