Lucene search
+L

8892 matches found

CNVD
CNVD
added 2019/07/17 12:00 a.m.11 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27772)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:00 a.m.7 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27767)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:00 a.m.10 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27770)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:00 a.m.7 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27769)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01154EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:00 a.m.7 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27768)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:00 a.m.12 views

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27775)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

7.5CVSS6.6AI score0.01244EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/07/15 12:00 a.m.12 views

PT-2019-17676 · Unknown · Http File Server

Name of the Vulnerable Software and Affected Versions: http-file-server versions = 0.2.6 Description: A path traversal issue allows attackers to list files in arbitrary folders. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relati...

5.3CVSS5.1AI score0.01502EPSS
SaveExploits1References4
nodejs
nodejs
added 2019/07/12 10:13 p.m.16 views

Malicious Package

Overview All versions of retcodelog contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on th...

6.8AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/07/12 10:11 p.m.17 views

Malicious Package

Overview All versions of hpmm contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

6.8AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/07/12 10:05 p.m.15 views

Malicious Package

Overview All versions of alico contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

6.8AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/07/12 10:04 p.m.19 views

Malicious Package

Overview All versions of ali-contributors contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

6.8AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/07/11 7:05 p.m.29 views

Security Bulletin: Publicly disclosed vulnerability in Oracle Outside In Technology used by IBM FileNet Content Manager

Summary Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager. Oracle OIT issues disclosed in the Oracle April 2019 Critical Patch Update. Vulnerability Details CVEID: CVE-2019-2610 DESCRIPTION: An unspecified vulnerability in Oracl...

8.2CVSS1.1AI score0.01684EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2019/06/17 2:15 p.m.23 views

CVE-2018-20470

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal arbitrary file access vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files...

7.5CVSS7.4AI score0.4606EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
added 2019/05/10 12:00 a.m.13 views

PT-2019-12539 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: WEBrick gem version 1.4.2 Description: The issue allows directory traversal if an attacker had local access to create a symlink to a location outside of the web root directory. The vendor considers this analogous to Options FollowSymlinks in...

5.5CVSS7AI score0.00549EPSS
SaveExploits0References4
OSV
OSV
added 2019/05/06 7:29 p.m.6 views

CVE-2018-4062

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without a...

8.1CVSS5.8AI score0.05324EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.8 views

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

6.5CVSS6.8AI score0.01462EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.9 views

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Technology SDK’s sub-component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial service failure using the HTTP networ...

6.5CVSS6.8AI score0.01684EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.6 views

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology software development kit (SDK). This component allows a malicious individual to gain unauthorized access to protected information or cause partial service failure.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

6.5CVSS6.8AI score0.01684EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.13 views

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

7.5CVSS7.2AI score0.01218EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.9 views

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

6.5CVSS6.8AI score0.01684EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder