Lucene search
K

26 matches found

CNNVD
CNNVD
added 2026/03/16 12:0 a.m.3 views

AnythingLLM SQL注入漏洞

AnythingLLM is an all-in-one AI application open-sourced by Mintplex. AnythingLLM SQL injection vulnerability , the vulnerability stems from the built-in SQL proxy plug-in getTableSchemaSql method of the tablename parameter lack of validation of external input SQL statements , an attacker can use...

8.8CVSS6.1AI score0.00045EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2026/02/10 3:40 p.m.361 views

Exploit for Improper Access Control in Oracle Http_Server

CVE-2026-21962 Concurrent WebLogic Scanner/Exploiter High-per...

10CVSS6AI score0.00026EPSS
Exploits4
VulnCheck KEV
VulnCheck KEV
added 2026/02/10 12:0 a.m.2 views

VulnCheck KEV: CVE-2026-21962

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0...

10CVSS7.3AI score0.00026EPSS
In wildExploits4References3
GithubExploit
GithubExploit
added 2026/02/09 11:43 p.m.135 views

Exploit for Improper Access Control in Oracle Http_Server

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Criti...

10CVSS5.6AI score0.00026EPSS
Exploits4
Imperva Blog
Imperva Blog
added 2026/01/26 7:28 p.m.15 views

Imperva Customers Protected Against CVE-2026-21962 in Oracle HTTP and WebLogic

What Is CVE-2026-21962? CVE-2026-21962 is a critical CVSS 10.0 vulnerability in the Oracle HTTP Server and the WebLogic Server Proxy Plug-in for Apache HTTP Server and Microsoft IIS. An unauthenticated attacker with HTTP access can exploit this flaw by sending crafted requests to the affected pro...

10CVSS6AI score0.00026EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.9 views

Oracle HTTP Server (January 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy...

10CVSS7.1AI score0.01777EPSS
Exploits7References11
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.9 views

Oracle HTTP Server (January 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy...

10CVSS7.1AI score0.01777EPSS
Exploits6References11
Saint
Saint
added 2026/01/23 12:0 a.m.93 views

Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability

Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...

6.3AI score
Exploits0
Saint
Saint
added 2026/01/23 12:0 a.m.86 views

Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability

Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...

6.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/21 10:24 p.m.11 views

CVE-2026-21962

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0...

10CVSS5.5AI score0.00026EPSS
Exploits4References1
OSV
OSV
added 2026/01/20 10:15 p.m.2 views

CVE-2026-21962

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0...

10CVSS5.8AI score0.00026EPSS
Exploits4References4
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.2 views

Oracle Fusion Middleware security vulnerabilities

Oracle Fusion Middleware is a business innovation platform developed by Oracle Corporation for enterprise and cloud environments. This platform provides middleware, software collections, and other functions. WebLogic Server is an application server component suitable for both cloud and traditiona...

10CVSS7.4AI score0.00026EPSS
Exploits4References3
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.9 views

PT-2026-3709

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in for Apache HTTP Server, and Oracle Weblogic Server Proxy Plug-in for IIS versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 are affected. Description An easily exploitable vulnerability...

10CVSS7.7AI score0.00026EPSS
Exploits4References86
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.2 views

Fortinet FortiDLP 安全漏洞

Fortinet FortiDLP is a data leak prevention software from Fortinet, Inc. A security vulnerability exists in Fortinet FortiDLP that stems from an Outlookproxy plug-in that may allow an authenticated administrator to collect email information from the current user...

6CVSS6.4AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-0419

Malware in sbrugna...

5CVSS6.4AI score0.00952EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-1929

Malware in sbrugna...

4.3CVSS6.1AI score0.00678EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2021/10/22 12:0 a.m.96 views

Oracle HTTP Server (Oct 2021 CPU)

The 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-In product of Oracle Fusion Middleware component: SSL...

7.8CVSS6.9AI score0.05584EPSS
Exploits4References6
OpenVAS
OpenVAS
added 2009/06/19 12:0 a.m.23 views

Sun Java System Web Proxy Server Vulnerabilities (Windows)

This host has Sun Java Web Server running on Linux, which is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservxssvulnlin.nasl 5158 2017-02-01 14:53:04Z mime $ Sun Java System Web Server XSS Vulnerability Linux Authors: Sharath S Copyright: Copyright ...

4.3CVSS0.2AI score0.00678EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2009/06/19 12:0 a.m.18 views

Sun Java System Web Proxy Server Vulnerabilities - Windows

Sun Java Web Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.4AI score0.00678EPSS
Exploits0References4
NVD
NVD
added 2009/06/05 4:0 p.m.13 views

CVE-2009-1934

Cross-site scripting XSS vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error...

4.3CVSS5.5AI score0.00678EPSS
Exploits0References9
Rows per page
Query Builder