Lucene search
+L

9190 matches found

CNVD
CNVD
added 2018/01/17 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02269)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

8.2CVSS6.6AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02274)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

5.3CVSS6.8AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02272)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...

6.5CVSS6.8AI score0.01446EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.7 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02270)

Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the WebCenter Spaces Application...

8.2CVSS6.6AI score0.01733EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.9 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02273)

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of Oracle's business innovation platforms for enterprise and cloud environments.Oracle HTTP Server is one of the web server components based on Apache open source technology, which delivers static and dynamic content and can be integrat...

5.3CVSS6.7AI score0.01974EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/17 12:00 a.m.9 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02268)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

8.2CVSS6.6AI score0.01347EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2017/12/25 9:57 p.m.103 views

U.S. Dept Of Defense: WebLogic Server Side Request Forgery

Universal Description Discovery and Integration UDDI application is publicly available on this WebLogic server. The SearchPublicRegistries.jsp page can be abused by unauthenticated attackers to cause the WebLogic web server to connect to an arbitrary TCP port of an arbitrary host. Responses...

5CVSS8.9AI score0.38152EPSS
SaveExploits8
CNVD
CNVD
added 2017/11/22 12:00 a.m.11 views

OpenStack Swauth Authentication Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration in collaboration with Rackspace in the U.S. OpenStack Swauth is one of the licensing systems.OpenStack Swift is a cloud storage software for retrieving large amounts of data. A security...

9.8CVSS7AI score0.08422EPSS
SaveExploits0References1
Prion
Prion
added 2017/11/21 1:29 p.m.24 views

Authentication flaw

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

7.5CVSS9.5AI score0.08422EPSS
SaveExploits0References5Affected Software3
NVD
NVD
added 2017/11/21 1:29 p.m.27 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS9.6AI score0.08422EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2017/11/21 1:29 p.m.6 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS5.6AI score0.08422EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2017/11/21 1:29 p.m.31 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS7.2AI score0.08422EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/21 1:29 p.m.12 views

UBUNTU-CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS7.3AI score0.08422EPSS
SaveExploits0References3
CVE
CVE
added 2017/11/21 1:00 p.m.86 views

CVE-2017-16613

CVE-2017-16613 affects OpenStack Swauth (middleware.py) when used with OpenStack Swift up to versions 2.15.1. The issue: the Swift object store and proxy may save unhashed authentication tokens to a log file as part of GET URIs, which enables an attacker to bypass authentication by injecting a to...

9.8CVSS9.3AI score0.08422EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2017/11/16 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34222)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/16 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34232)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/16 12:00 a.m.6 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34231)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/16 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34221)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/16 12:00 a.m.9 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.6AI score0.02142EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/14 11:29 p.m.7 views

CVE-2017-10267

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

7.5CVSS5.8AI score0.02142EPSS
SaveExploits0References2
Rows per page
Query Builder