Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-32380

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.01474EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/05/18 12:0 a.m.16 views

F5 Networks BIG-IP : BIG-IP iQuery mesh vulnerability (K000132972)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.4 / 15.1.8.2 / 16.1.3.4 / 17.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000132972 advisory. - When DNS is provisioned, an authenticated remote command execution vulnerability exists i...

8.8CVSS8.1AI score0.01474EPSS
Exploits0References2
OSV
OSV
added 2023/05/03 3:15 p.m.1 views

CVE-2023-28742

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.8CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2023/05/03 3:15 p.m.20 views

CVE-2023-28742

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.8CVSS7.5AI score0.01474EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/03 2:34 p.m.12 views

CVE-2023-28742 BIG-IP iQuery mesh vulnerability

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS8.8AI score0.01474EPSS
Exploits0References1
CVE
CVE
added 2023/05/03 2:34 p.m.59 views

CVE-2023-28742

CVE-2023-28742 describes an authenticated remote command execution vulnerability in the BIG-IP DNS iQuery mesh when DNS is provisioned. The issue allows an attacker with network access to the DNS iQuery mesh (via the BIG-IP management port and/or self IPs) to execute arbitrary system commands thr...

8.8CVSS7.9AI score0.01474EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 2:34 p.m.17 views

CVE-2023-28742 BIG-IP iQuery mesh vulnerability

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS9AI score0.01474EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2023/05/03 12:10 p.m.22 views

K000132972: BIG-IP iQuery mesh vulnerability CVE-2023-28742

Security Advisory Description When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. CVE-2023-28742 Impact This vulnerability may allow an authenticated attacker with network access to the DNS iQuery mesh through the BIG-IP management port and/...

8.8CVSS8.9AI score0.01474EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.2 views

PT-2023-21932 · Unknown · Dns Iquery Mesh

Name of the Vulnerable Software and Affected Versions: DNS iQuery mesh affected versions not specified Description: A remote command execution issue exists when DNS is provisioned, allowing authenticated attackers to execute commands. The issue is related to the DNS iQuery mesh. Recommendations: ...

8.8CVSS8.6AI score0.01474EPSS
Exploits0References4
OSV
OSV
added 2017/10/19 5:29 p.m.1 views

CVE-2017-10403

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: iQuery. Supported versions that are affected are 8.5.1 and 9.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/10/19 5:29 p.m.3 views

CVE-2017-10404

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: iQuery. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

9.9CVSS5.8AI score0.01453EPSS
Exploits0References2
NVD
NVD
added 2017/10/19 5:29 p.m.11 views

CVE-2017-10404

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: iQuery. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

9.9CVSS8.6AI score0.01453EPSS
Exploits0References2
Prion
Prion
added 2017/10/19 5:29 p.m.15 views

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: iQuery. Supported versions that are affected are 8.5.1 and 9.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

4.6CVSS7.1AI score0.00994EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/10/19 5:29 p.m.13 views

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: iQuery. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

6.5CVSS8.4AI score0.01453EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/10/19 5:0 p.m.54 views

CVE-2017-10403

CVE-2017-10403 affects the Oracle Hospitality Reporting and Analytics product (subcomponent iQuery). The vulnerable versions are 8.5.1 and 9.0.0. The issue is exploitable by a low-privilege attacker who can reach the service over HTTP; attacks require user interaction from a person other than the...

8CVSS8AI score0.00994EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/10/19 5:0 p.m.49 views

CVE-2017-10404

Affected software: Oracle Hospitality Reporting and Analytics, subcomponent iQuery. Affects versions 8.5.1 and 9.0.0. Root cause: unpatched vulnerability in iQuery allows a low-privilege attacker with HTTP network access to compromise Oracle Hospitality Reporting and Analytics, potentially taking...

9.9CVSS8.7AI score0.01453EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/10/18 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2017-31320)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

8CVSS7.8AI score0.00994EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/18 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2017-31318)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

9.9CVSS9AI score0.01453EPSS
Exploits0References1
Rows per page
Query Builder