Lucene search
K

4401 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the Security component of the Oracle Transportation Management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Transportation Management system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

5.4CVSS6.3AI score0.00255EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using...

5.3CVSS6.3AI score0.01176EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure.

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the HTTP protocol...

7.8CVSS7.2AI score0.018EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain full control over the application.

The vulnerability of the Promotions component in Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the application using the HTTP protocol...

10CVSS7.7AI score0.01559EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the InQuira Search component in the Oracle Knowledge business application allows a hacker to trigger a service failure.

The vulnerability of the InQuira Search component in the Oracle Knowledge knowledge management business application is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

7.1CVSS6.5AI score0.01622EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application, which allows a perpetrator to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

8.5CVSS6.8AI score0.00463EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the Information Manager Console component in the Oracle Knowledge business application, which allows a hacker to trigger a service failure.

The vulnerability of the Information Manager Console component in the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

7.1CVSS6.5AI score0.01622EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the Candidate Gateway component of the Oracle PeopleSoft Enterprise HRMS application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Candidate Gateway component of the Oracle PeopleSoft Enterprise HRMS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

6.1CVSS6.7AI score0.008EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to induce a service failure.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

8.6CVSS7.6AI score0.01422EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.4 views

The vulnerability of the Diagnostic Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostic Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

6.1CVSS6.7AI score0.008EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/06/04 12:0 a.m.2 views

Google Chrome CSS Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in CSS in Google Chrome versions prior to 11.0.0.0. A remote attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted HTML pages...

8.8CVSS6.8AI score0.00354EPSS
Exploits1References1
OSV
OSV
added 2020/06/03 11:15 p.m.0 views

UBUNTU-CVE-2020-6500

Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS6.9AI score0.00236EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.1 views

The vulnerabilities of the Caching components, CacheStore, and the software platform for data processing in Oracle Coherence allow a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Caching, CacheStore, and Invocation components of the Oracle Coherence data processing software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the HT...

5.3CVSS6.3AI score0.01176EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/06/02 12:0 a.m.1 views

PT-2020-13664 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.19 Description: The default settings of the global textfilter configuration in Joomla! do not block HTML inputs for Guest users. This issue may allow unauthorized users to inject malicious HTML code...

7.5CVSS6.5AI score0.00011EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.1 views

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to access, modify, add, or delete data.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...

4.3CVSS5.8AI score0.0122EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.1 views

The vulnerability of the Security component of the Oracle Hyperion Financial Management application, which allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Security component of the Oracle Hyperion Financial Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

4.9CVSS5.8AI score0.00364EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.1 views

The vulnerability of the Web Listener component of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...

6.5CVSS6.8AI score0.01403EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.1 views

The vulnerability of the JSE component of the Java SE software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the JSE component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTPS network protocol...

5.8CVSS6.5AI score0.00328EPSS
Exploits0References5Affected Software3
Snyk
Snyk
added 2020/05/29 3:11 p.m.1 views

HTTP Request Smuggling

Overview reel is a fast, non-blocking "evented" web server built on httpparser.rb, websocket-driver, Celluloid::IO, and nio4r. Note: This project is deprecated, and is not maintained anymore. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and...

8.2CVSS6.2AI score0.00095EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...

5.3CVSS6.3AI score0.01434EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder