Lucene search
K

7 matches found

NVD
NVD
added 2026/04/28 1:19 p.m.0 views

CVE-2026-5781

An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their privileges by sending an HTTP request with a manipulated 'identifier' field. Successful exploitati...

8.8CVSS0.0005EPSS
Exploits0References1
Snyk
Snyk
added 2025/06/04 6:43 a.m.1 views

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the ResourceGraphDefinition resources. An attacker can execute arbitrary code on cluster nodes by supplying attacker-controlled images. This is only exploitable if the user has...

6.9CVSS7.8AI score0.00749EPSS
Exploits0References2
OSV
OSV
added 2021/11/30 12:15 p.m.0 views

CVE-2021-42122

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the...

4.3CVSS5.8AI score0.00147EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2017/08/01 2:18 p.m.2 views

mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

4.3CVSS7.1AI score0.00217EPSS
Exploits0References5
OSV
OSV
added 2017/04/24 7:59 p.m.0 views

CVE-2017-3543

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

8.6CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.0 views

CVE-2017-3432

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Audience workbench. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.1CVSS5.8AI score
Exploits0References3
Packet Storm
Packet Storm
added 2004/04/28 12:0 a.m.98 views

disconn.py

!/usr/bin/python Version: 1.1 Copyright 2004 r3d5un disconn.py is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. disconn.p...

5CVSS9AI score0.09318EPSS
Exploits3
Rows per page
Query Builder