Lucene search
K

5543 matches found

Vulnrichment
Vulnrichment
added 2017/04/24 7:0 p.m.8 views

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

6.3AI score0.01665EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2017/04/24 7:0 p.m.11 views

CVE-2017-3543

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

6.9AI score0.02295EPSS
Exploits0References3
CVE
CVE
added 2017/04/24 7:0 p.m.51 views

CVE-2017-3507

CVE-2017-3507 affects Oracle Fusion Middleware’s Oracle Service Bus (Web Console Design) up to version 12.2.1.2.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise Oracle Service Bus by performing unauthorized updates/inserts/deletes and reads, poten...

7.5CVSS6.5AI score0.01665EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/04/24 7:0 p.m.45 views

CVE-2017-3504

CVE-2017-3504 affects Oracle's Automatic Service Request (ASR) Manager within Oracle Support Tools, with vulnerable versions prior to 5.7. The issue allows an unauthenticated attacker who can log on to the infrastructure running ASR to perform unauthorized updates, inserts, or deletions of ASR-ac...

5.1CVSS5AI score0.00395EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.3 views

The vulnerability of the software for Cisco WebEx Meetings Server allows a perpetrator to partially compromise the confidentiality and integrity of information.

The vulnerability of Cisco WebEx Meetings Server software relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to partially compromise the confidentiality and integrity of information...

6.4CVSS6.6AI score0.01451EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2017/03/30 1:33 a.m.15 views

Partial Denial Of Service (DoS)

web-core is vulnerable to partial denial of service attacks. The vulnerability is possible due to JVM bottleneck caused by a flaw in JVM code, translating named encoding e.g., "utf-8" into Charsets. Therefore, that flaw leads to a number of stuck threads converting a byte array to a String or vic...

5CVSS5.8AI score0.0164EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2017/02/17 2:59 a.m.4 views

DEBIAN-CVE-2016-5417

Memory leak in the resvinit function in the IPv6 name server management code in libresolv in GNU C Library aka glibc or libc6 before 2.24 allows remote attackers to cause a denial of service memory consumption by leveraging partial initialization of internal resolver data structures...

7.5CVSS6.9AI score0.03361EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/02/16 12:0 a.m.29 views

CVE-2016-5417

Memory leak in the resvinit function in the IPv6 name server management code in libresolv in GNU C Library aka glibc or libc6 before 2.24 allows remote attackers to cause a denial of service memory consumption by leveraging partial initialization of internal resolver data structures...

7.5CVSS7.1AI score0.03361EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.4 views

The vulnerability of the Oracle VM VirtualBox virtual machine allows a hacker to gain access to data reading, modify data, or cause a partial service failure.

The vulnerability of the GUI component of the Oracle VM VirtualBox lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to gain read access to data, modify, add, or delete data, or cause partial service failure through HTTP requests...

6.8CVSS6.9AI score0.01488EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

3.7CVSS5.8AI score0.01561EPSS
Exploits0References3
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3323

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

3.7CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3321

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

3.7CVSS7.3AI score0.0182EPSS
Exploits0References3
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3271

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters . Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.6CVSS7.2AI score0.02081EPSS
Exploits1References3
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3250

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

7.3CVSS7.3AI score0.01265EPSS
Exploits0References2
NVD
NVD
added 2017/01/27 10:59 p.m.21 views

CVE-2017-3250

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

7.5CVSS6.6AI score0.01265EPSS
Exploits0References2
NVD
NVD
added 2017/01/27 10:59 p.m.16 views

CVE-2017-3249

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish...

7.5CVSS6.6AI score0.01376EPSS
Exploits0References2
OSV
OSV
added 2017/01/27 10:59 p.m.2 views

CVE-2016-8310

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

7.3CVSS7.3AI score0.017EPSS
Exploits0References3
NVD
NVD
added 2017/01/27 10:59 p.m.15 views

CVE-2016-8310

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

7.5CVSS6.3AI score0.017EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2017/01/27 10:59 p.m.39 views

CVE-2017-3250

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

7.5CVSS7.1AI score0.01265EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2017/01/27 10:59 p.m.3 views

CVE-2016-8310

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

7.5CVSS5.4AI score0.017EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder