Lucene search
+L

471 matches found

CNVD
CNVD
•added 2019/04/08 12:00 a.m.•18 views

AxiomSL Axiom Google Web Toolkit Module Security Vulnerability

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

6.1CVSS6.9AI score0.0103EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/04/08 12:00 a.m.•18 views

AxiomSL Axiom java applet module security vulnerability

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

9.8CVSS6.9AI score0.02031EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/04/08 12:00 a.m.•20 views

AxiomSL Axiom Google Web Toolkit module security vulnerability (CNVD-2019-42884)

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

8.8CVSS6.9AI score0.01332EPSS
SaveExploits0References1
NVD
NVD
•added 2019/04/03 8:29 p.m.•35 views

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

9.8CVSS9.7AI score0.02031EPSS
SaveExploits0References1
CVE
CVE
•added 2019/04/03 7:15 p.m.•69 views

CVE-2015-5463

CVE-2015-5463 affects AxiomSL’s Axiom java applet module (used for editing uploaded Excel files and related Java RMI services) version 9.5.3 and earlier. The connected documents corroborate multiple dangerous impacts: remote attackers can (1) access data of other basic users via arbitrary SQL com...

9.8CVSS9.6AI score0.02031EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/04/03 7:15 p.m.•42 views

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

9.8AI score0.02031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/03 12:00 a.m.•6 views

PT-2019-7192

Name of the Vulnerable Software and Affected Versions AxiomSL's Axiom java applet module versions 9.5.3 and earlier Description The issue allows remote attackers to access data of other basic users through arbitrary SQL commands, perform horizontal and vertical privilege escalation, cause a Denia...

9.8CVSS0.02031EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/03 12:00 a.m.•8 views

CVE-2015-5463: Improper Authorization

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

9.8CVSS6AI score0.02031EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/01/15 8:54 a.m.•28 views

Information Disclosure

icedtea-web is vulnerable to information disclosure attacks. The vulnerability exists as the LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary...

2.1CVSS5.2AI score0.00478EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2019/01/15 8:52 a.m.•33 views

Unauthorized Time Zone Modification

IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server has a vulnerability which affects the time zone information of the application. The vulnerability is possible because java.util.TimeZone fails to prevent the untrusted Java application or applet to change the time zo...

6.4CVSS5.9AI score0.03932EPSS
SaveExploits0References30Affected Software3
Microsoft KB
Microsoft KB
•added 2018/04/23 12:55 a.m.•55 views

MS03-011: Flaw in the Microsoft VM could enable system compromise

The Microsoft virtual machine Microsoft VM update that was previously listed in this article is no longer available. For more information, visit the following Microsoft Web pages: http://www.microsoft.com/mscorp/java/default.mspxhttp://support.microsoft.com/gp/lifean12Technical UpdateJuly 17, 200...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/03/23 12:00 a.m.•126 views

Bomgar Remote Support Portal (RSP) Path Traversal

Hey, The Path Traversal vulnerability was found in the component of the Bomgar Remote Support Portal RSP 1. The affected component is a JavaStart.jar applet that is hosted at https://TARGET/api/content/JavaStart.jar on the vulnerable RSP deployments. The JavaStart version 52970 and prior were...

9.3AI score0.01954EPSS
SaveExploits2
Kitploit
Kitploit
•added 2017/07/18 2:30 p.m.•40 views

SET v7.7 - The Social-Engineer Toolkit “Blackout”

The Social-Engineer Toolkit SET was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. SET has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two...

7.9AI score
SaveExploits0References1
CNVD
CNVD
•added 2016/12/31 12:00 a.m.•7 views

Multiple vulnerabilities in foxit reader (Foxit Reader)

foxit reader Foxit Reader is a PDF file reader. foxit reader Foxit Reader there are multiple vulnerabilities, vulnerabilities through the java app object of multiple function calls/apply method trigger, remote attackers can take advantage of the vulnerability in the current process to execute...

7.6AI score
SaveExploits0
OSV
OSV
•added 2016/10/25 2:29 p.m.•16 views

CVE-2016-5523

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet...

8.8CVSS5.8AI score0.02022EPSS
SaveExploits0References2
NVD
NVD
•added 2016/10/25 2:29 p.m.•24 views

CVE-2016-5523

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet...

8.8CVSS7.3AI score0.02022EPSS
SaveExploits0References2
Prion
Prion
•added 2016/10/25 2:29 p.m.•24 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet...

6.5CVSS5.8AI score0.02022EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2016/10/25 2:00 p.m.•21 views

CVE-2016-5523

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet...

5.7AI score0.02022EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/10/25 2:00 p.m.•41 views

CVE-2016-5523

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet...

7.5AI score0.02022EPSS
SaveExploits0References2
CVE
CVE
•added 2016/10/25 2:00 p.m.•63 views

CVE-2016-5523

CVE-2016-5523 affects Oracle Supply Chain Products Suite (Oracle Agile PLM) 9.3.4/9.3.5 via the AutoVue Java Applet. The root cause is an unspecified vulnerability that allows remote authenticated users to affect confidentiality, integrity, and availability. Impact is described as partial to tota...

8.8CVSS7.6AI score0.02022EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder