Lucene search
+L

9379 matches found

Vulnrichment
Vulnrichment
added 2021/01/20 2:49 p.m.19 views

CVE-2020-14756

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core Components. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP,...

9.8CVSS7.4AI score0.74753EPSS
SaveExploits4References2
Cvelist
Cvelist
added 2021/01/20 2:49 p.m.45 views

CVE-2020-14756

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core Components. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP,...

9.8CVSS9.4AI score0.74753EPSS
SaveExploits4References2
CVE
CVE
added 2021/01/20 2:49 p.m.158 views

CVE-2020-14756

CVE-2020-14756 : An insecure deserialization vulnerability in Oracle Coherence (Fusion Middleware Core Components) allows unauthenticated remote code execution via IIOP/T3. Affected versions include 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. Successful exploitation can lead to t...

9.8CVSS9.3AI score0.74753EPSS
SaveExploits4References2Affected Software2
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.13 views

Oracle Fusion Middleware WebLogic Server Authorization Issues Vulnerability

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies application deployment and...

9.8CVSS7.2AI score0.03728EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.11 views

Oracle Fusion Middleware Component Authorization Issues Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS5.8AI score0.03728EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.13 views

Oracle Fusion Middleware 授权问题漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An authorization issue vulnerability exists in the Oracle Coherence product...

9.8CVSS7.3AI score0.74753EPSS
SaveExploits4References6
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.12 views

Oracle Fusion Middleware Component Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

3.5CVSS5.8AI score0.0126EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.19 views

Oracle Fusion Middleware Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

4.3CVSS5.8AI score0.01662EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.10 views

Oracle Fusion Middleware 授权问题漏洞

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A security vulnerability exists in the Outside In Filters...

8.6CVSS5.8AI score0.01355EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.23 views

Oracle Fusion Middleware Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

6.5CVSS5.8AI score0.01479EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.14 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS7.3AI score0.03804EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.11 views

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware's Oracle Business Intelligence Enterprise Edition...

5.4CVSS5.8AI score0.0069EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/19 12:00 a.m.11 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS7.3AI score0.03804EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/11 12:00 a.m.20 views

Flask Middleware Flask-security Cross-Site Request Forgery Vulnerability

Flask Middleware Flask-security is a Python-based codebase from the Flask Middleware organization that provides security features for Flask applications. A cross-site request forgery vulnerability exists in Flask Middleware Flask-security versions 3.3.0 through 3.4.5. The vulnerability stems from...

7.4CVSS7AI score0.00917EPSS
SaveExploits0References8
NVD
NVD
added 2021/01/06 9:15 p.m.37 views

CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS5.9AI score0.66986EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/06 9:15 p.m.24 views

CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.1AI score
SaveExploits0References2
OSV
OSV
added 2021/01/06 9:15 p.m.9 views

DEBIAN-CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.2AI score0.66986EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/06 9:15 p.m.20 views

Cross site scripting

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

4.3CVSS5.9AI score0.66986EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/01/06 9:15 p.m.30 views

CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.9AI score0.66986EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2021/01/06 9:02 p.m.77 views

CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.5AI score0.66986EPSS
SaveExploits1
Rows per page
Query Builder