Lucene search
K

1072 matches found

Check Point Advisories
Check Point Advisories
added 2017/03/27 12:0 a.m.2 views

HTTP Protocol Remote Code Execution

A remote code execution vulnerability exists in HTTP protocol. By sending a request containing a specially crafted EXE file, a remote attacker can exploit this vulnerability in order to execute arbitrary code on the effected system...

3AI score
Exploits0
NVD
NVD
added 2017/02/13 9:59 p.m.12 views

CVE-2016-5786

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

7.5CVSS7.5AI score0.00457EPSS
Exploits0References2
Prion
Prion
added 2017/02/13 9:59 p.m.12 views

Design/Logic Flaw

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

5CVSS7AI score0.00457EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/02/13 9:0 p.m.52 views

CVE-2016-5786

CVE-2016-5786 affects OmniMetrix OmniView (Version 1.2). The vulnerability arises because the OmniView web application transmits credentials using HTTP (cleartext), enabling network-level interception and potential credential compromise. The issue is categorized under cleartext transmission of se...

7.5CVSS7.5AI score0.00457EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/02/13 9:0 p.m.24 views

CVE-2016-5786

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

7.5AI score0.00457EPSS
Exploits0References2
Apple
Apple
added 2017/01/23 5:36 a.m.44 views

About the security content of Safari 10 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.6CVSS0.1AI score0.08398EPSS
Exploits1Affected Software4
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00787)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

8.2CVSS6.8AI score0.00764EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.1 views

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00946)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

8.1CVSS6.8AI score0.00393EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Oracle Application Testing Suite Remote Vulnerability

The Application Testing Suite is a comprehensive, integrated testing solution that ensures the quality, scalability and availability of Web applications and Web services. A remote security vulnerability exists in Oracle Application Testing Suite. An attacker exploiting the vulnerability via the...

5.3CVSS6.9AI score0.00635EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.4 views

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00963)

Oracle E-Business Suite E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation, of which Oracle Advanced Outbound Telephony is a component that improves the efficiency of customer interaction calls. A remote vulnerability exists in the Oracle...

8.2CVSS6.9AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.1 views

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00950)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

6.1CVSS6.8AI score0.00501EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00966)

Oracle E-Business Suite E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation, of which Oracle One-to-One Fulfillment is a component that sends information, letters and statements to customers. A remote vulnerability exists in the Oracle...

8.2CVSS6.8AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00964)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Universal Work Queue is one of the universal work queue component. A remote vulnerability exists in the Oracle Universal Work Queue component o...

8.2CVSS6.9AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00939)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

6.1CVSS6.9AI score0.00501EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.2 views

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00792)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

6.1CVSS6.8AI score0.00512EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.1 views

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00790)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

5.5CVSS6.8AI score0.00221EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/20 12:0 a.m.1 views

Oracle VM VirtualBox Remote Vulnerability (CNVD-2017-00984)

Oracle VM VirtualBox is a cross-platform virtual machine software from Oracle. The software supports running multiple operating systems, creating VM groups, sharing folders, etc. on the same computer. A remote security vulnerability exists in Oracle VM VirtualBox versions prior to 5.0.32 and prio...

6.8CVSS6.8AI score0.00324EPSS
Exploits0References1
OSV
OSV
added 2017/01/12 10:59 p.m.0 views

UBUNTU-CVE-2016-8606

The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...

9.8CVSS7.5AI score0.0034EPSS
Exploits0References2
Node.js
Node.js
added 2016/11/30 8:53 p.m.41 views

Downloads Resources over HTTP

Overview Affected versions of appium-chromedriver insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read items send over HTTP at will. In this case, that includes the chromedriver binary, which may result in remote code...

6.8CVSS4.8AI score0.00765EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/11/11 12:0 a.m.35 views

Oracle Linux 7 : python (ELSA-2016-2586)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2586 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata...

10CVSS7.2AI score0.45123EPSS
Exploits7References2
Rows per page
Query Builder