CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

243 matches found

IBM Security Bulletins•added 2018/06/16 7:32 p.m.•50 views

Security Bulletin: Potential Security Vulnerabilities in Oracle Java 6 SDK affecting IBM WebSphere Multichannel Bank Transformation Toolkit version 8

Summary IBM WebSphere Multichannel Bank Transformation Toolkit version 8.x has a potential security exposure due to vulnerabilities in the Oracle Java 6 SDK that allow remote attackers to affect confidentiality, integrity and availability of the Java platform via various vectors. It happens only ...

10CVSS7.4AI score0.98802EPSS

SaveExploits33Affected Software1

CNVD•added 2017/04/27 12:00 a.m.•64 views

Oracle PeopleSoft Enterprise PeopleTools Unauthorized Operation Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

6.5CVSS6.6AI score0.09636EPSS

SaveExploits5References1

OSV•added 2017/04/24 7:59 p.m.•13 views

CVE-2017-3546

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

6.5CVSS5.8AI score0.09636EPSS

SaveExploits5References5

OSV•added 2017/04/24 7:59 p.m.•20 views

CVE-2017-3547

7.4CVSS5.8AI score0.02153EPSS

SaveExploits0References4

Prion•added 2017/04/24 7:59 p.m.•28 views

Code injection

6.4CVSS5.3AI score0.09636EPSS

SaveExploits5References5Affected Software1

Prion•added 2017/04/24 7:59 p.m.•25 views

Design/Logic Flaw

7.1CVSS6.5AI score0.02153EPSS

SaveExploits0References4Affected Software1

Cvelist•added 2017/04/24 7:00 p.m.•52 views

CVE-2017-3546

5.4AI score0.09636EPSS

SaveExploits5References5

Cvelist•added 2017/04/24 7:00 p.m.•44 views

CVE-2017-3547

6.4AI score0.02153EPSS

SaveExploits0References4

CVE•added 2017/04/24 7:00 p.m.•104 views

CVE-2017-3546

CVE-2017-3546 affects Oracle PeopleSoft Tools (MultiChannel Framework), specifically SSRF in IMServlet for ToolsRelease 8.55.x (ToolsReleaseDB 8.55; HCM 9.2). Connected docs show SSRF allows remote attacker over network to cause cross-site requests, enabling potentially unauthorized access or por...

6.5CVSS5.3AI score0.09636EPSS

SaveExploits5References5Affected Software1

Rapid7 Vulnerability Database (full)•added 2017/04/24 12:00 a.m.•9 views

CVE-2017-3547: Improper Neutralization of Special Elements in Output Used by a Downstream Component

7.4CVSS5.8AI score0.02153EPSS

SaveExploits0References2

Positive Technologies•added 2017/04/24 12:00 a.m.•4 views

PT-2017-15981

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.54 Oracle PeopleSoft Products version 8.55 Description The issue affects the PeopleSoft Enterprise PeopleTools component, specifically the MultiChannel Framework subcomponent. It allows an unauthenticated...

7.4CVSS0.02153EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2017/04/24 12:00 a.m.•7 views

CVE-2017-3546: Server-Side Request Forgery (SSRF)

6.5CVSS5.8AI score0.09636EPSS

SaveExploits5References2

CNVD•added 2017/04/21 12:00 a.m.•18 views

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Remote Vulnerability

7.4CVSS6.6AI score0.02153EPSS

SaveExploits0References1

OSV•added 2017/01/27 10:59 p.m.•18 views

CVE-2017-3300

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Multichannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS7.3AI score0.01606EPSS

SaveExploits2References4

Vulnrichment•added 2017/01/27 10:01 p.m.•37 views

CVE-2017-3300

6AI score0.01606EPSS

SaveExploits2References4

Rapid7 Vulnerability Database (full)•added 2017/01/27 12:00 a.m.•4 views

CVE-2017-3300: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.01606EPSS

SaveExploits2References2

Positive Technologies•added 2017/01/27 12:00 a.m.•3 views

PT-2017-15763

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue affects the Multichannel Framework subcomponent of PeopleSoft Enterprise PeopleTools, allowing an unauthenticated attacker with network access via HTTP to compromis...

6.1CVSS0.01606EPSS

SaveExploits2References6

NVD•added 2017/01/20 3:59 p.m.•40 views

CVE-2014-2045

Multiple cross-site scripting XSS vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 300 allow remote attackers to inject arbitrary web script or HTML via the username when 1 logging in or 2 creating an account in the old interface, 3 username when creating an accou...

6.1CVSS6.2AI score0.04529EPSS

SaveExploits5References5

Prion•added 2017/01/20 3:59 p.m.•37 views

Cross site scripting

4.3CVSS6.3AI score0.04529EPSS

SaveExploits5References5Affected Software1

CVE•added 2017/01/20 3:00 p.m.•96 views

CVE-2014-2045

CVE-2014-2045 affects Viprinet Multichannel VPN Router 300. The issue is multiple cross‑site scripting (XSS) vulnerabilities in both the device’s old and new web interfaces, exploitable via crafted usernames or other parameters (e.g., hostname, config inspect, atcommands, ping tool). Exploitation...

6.1CVSS6.1AI score0.04529EPSS

SaveExploits5References5Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by