CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1081 matches found

Cvelist•added 2018/10/17 1:0 a.m.•18 views

CVE-2018-3196

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: Partner Dashboard. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

7.9AI score0.02024EPSS

SaveExploits0References3

Hacker One•added 2018/09/28 10:33 a.m.•19 views

Shopify: PII disclosure -- Past team members & their email ID(personal email) can be viewed by Staff member with no permissions on Partner Dashboard

Hi, I'm not too sure if this is intentional and a expected feature or was it really an unnecessary information disclosure. If this is intentional, kindly close this as Informative or allow me to self-close so as not affect my signal. From my perspective, I noticed 2 issues, PART 1: Using Partners...

0.7AI score

SaveExploits0

Openbugbounty•added 2018/09/22 9:29 a.m.•10 views

kohnlesoft.de XSS vulnerability

Open Bug Bounty ID: OBB-678969 Description| Value ---|--- Affected Website:| kohnlesoft.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0

Openbugbounty•added 2018/09/20 1:41 p.m.•50 views

interim-netwerk.nl XSS vulnerability

Open Bug Bounty ID: OBB-678442 Description| Value ---|--- Affected Website:| interim-netwerk.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0

Carbon Black Blog•added 2018/08/20 2:26 p.m.•22 views

Cb Customer Spotlight Series: Q&A with Hologic’s Ryan Manni

Being able to influence Carbon Black products through the Cb Defenders Design Partner Program is one Ryan Manni’s favorite aspects of being a Carbon Black customer. Ryan Manni is the current Manager of Security Operations at Hologic, an innovative medical technology company primarily focused on...

6.9AI score

SaveExploits0

Hacker One•added 2018/08/07 9:57 a.m.•34 views

Valve: Getting all the CD keys of any game

Using the /partnercdkeys/assignkeys/ endpoint on partner.steamgames.com with specific parameters, an authenticated user could download previously-generated CD keys for a game which they would not normally have access. Audit logs were not bypassed using this method, and an investigation of those...

1.8AI score

SaveExploits0

Intel•added 2018/07/24 12:0 a.m.•32 views

Intel® Smart Sound Technology vulnerabilities

Summary: CVE-2018-3666 • Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow. • 7.5 High CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H CVE-2018-3670 • Driver module in...

8.8CVSS7.4AI score0.00389EPSS

SaveExploits0

Openbugbounty•added 2018/07/21 12:50 p.m.•17 views

partner-inform.de XSS vulnerability

Open Bug Bounty ID: OBB-651520 Description| Value ---|--- Affected Website:| partner-inform.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score

SaveExploits0

Hacker One•added 2018/07/18 2:16 p.m.•283 views

Valve: SQL Injection in report_xml.php through countryFilter[] parameter

An unvalidated parameter on an partner reporting page reportxml.php could be used to read certain SQL data from a single backing database. Blind SQL Injection && Akamai WAF Bypass. Wait for the write-up ;...

2.4AI score

SaveExploits0

CISA•added 2018/07/06 12:0 a.m.•10 views

CIS Releases 2017 Year in Review

The Center for Internet Security CIS has released its 2017 Year in Review. CIS is home to the Multi-State Information Sharing and Analysis Center MS-ISAC, an NCCIC partner focused on cyber threat prevention, protection, response, and recovery for U.S. state, local, tribal, and territorial...

6.7AI score

SaveExploits0References1

Securelist•added 2018/06/26 10:0 a.m.•84 views

Pbot: evolving adware

The adware PBot PythonBot got its name because its core modules are written in Python. It was more than a year ago that we detected the first member of this family. Since then, we have encountered several modifications of the program, one of which went beyond adware by installing and running a...

0.9AI score

SaveExploits0

Hacker One•added 2018/06/21 1:56 p.m.•27 views

Mail.ru: Shell upload in partner service

Shell code upload RCE vulnerability in partner service provided as an additional functionality withing mail.ru branded service. On the moment of reporting, partner services are not covered by bug bounty program, the bounty was awarded due to potential problem criticality...

2.1AI score

SaveExploits0

IBM Security Bulletins•added 2018/06/16 8:5 p.m.•19 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Partner Gateway Advanced/Enterprise Edition(CVE-2016-0306)

Summary WebSphere Application Server is shipped as a component of WebSphere Partner Gateway. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Potential security...

2.3AI score0.01403EPSS