Lucene search
+L

487 matches found

BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.7 views

The vulnerability of the WLS component – the Web Services server of the J2EE application servers from Oracle WebLogic Server – allows attackers to gain access to confidential information.

The vulnerability of the WLS component—the Web Services server for J2EE applications—in Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information from a remote location...

7.5CVSS7.3AI score0.02295EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/05/20 12:0 a.m.9 views

PT-2021-7704 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix versions 4.0.x through 4.0.28rc1 Zabbix versions 5.0.0alpha1 through 5.0.10rc1 Zabbix versions 5.2.x through 5.2.6rc1 Zabbix versions 5.4.0alpha1 through 5.4.0beta2 Description: The issue is related to a lack of CSRF protection mechani...

9.8CVSS6.3AI score0.84657EPSS
Exploits8References76
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.8 views

The vulnerability of WLS Core Components of Oracle WebLogic Server application servers allows attackers to gain unauthorized access to protected information.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

7.8CVSS6AI score0.06395EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.13 views

The vulnerability of the xmlrpc_decode() function, a part of the XMLRPC interpreter for the PHP programming language, relates to the reading of data beyond the buffer memory boundary, allowing attackers to gain access to confidential data.

The vulnerability of the xmlrpcDecode function in the PHP programming language is related to an error that causes memory access beyond the allocated range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.5CVSS6.9AI score0.0712EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2019/04/23 7:32 p.m.4 views

UBUNTU-CVE-2018-3123

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: libmysqld. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

5.9CVSS6.6AI score0.02062EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2019/04/17 3:44 p.m.6 views

OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

5.9CVSS7.2AI score0.37618EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2019/04/03 12:0 a.m.7 views

PT-2019-5748 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.0 Description: The issue is related to an improper computation in the opj get encoding parameters function, which can lead to an integer overflow. This can potentially allow a remote attacker to access...

9.8CVSS6.3AI score0.05652EPSS
Exploits13References142
BDU FSTEC
BDU FSTEC
added 2019/02/21 12:0 a.m.7 views

The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile allows a perpetrator to gain access to protected data.

The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

4.3CVSS5.7AI score0.01933EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:0 a.m.6 views

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain access to protected information.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...

5.5CVSS6.3AI score0.01421EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:0 a.m.6 views

The vulnerability of the Outside In Filters component of the software development kit (SDK) from Outside In Technology allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using th...

5.3CVSS6.3AI score0.01547EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:0 a.m.13 views

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to data using the HTTP...

5.3CVSS6.3AI score0.0211EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.9 views

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.1CVSS6.7AI score0.01563EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.6 views

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTT...

6.1CVSS6.7AI score0.01563EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.5 views

The vulnerability of the Kernel Zones Virtualized NIC Driver in the Oracle Solaris operating system allows a hacker to gain access to protected information.

The vulnerability of the Kernel Zones Virtualized NIC Driver component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to gain access to protected information remotely...

6.2CVSS6.7AI score0.00507EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.7 views

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTT...

6.1CVSS6.7AI score0.01563EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.6 views

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the...

6.1CVSS6.7AI score0.01542EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.6 views

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

6.1CVSS6.7AI score0.01542EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.7 views

The vulnerability of the Attachments/File Upload component in the Oracle Application Object Library for Oracle E-Business Suite applications allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Attachments/File Upload component in the Oracle Application Object Library of the Oracle E-Business Suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data...

5.3CVSS6.3AI score0.01943EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:0 a.m.5 views

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or cause...

7.2CVSS7.2AI score0.01699EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:0 a.m.4 views

The vulnerability of the PIA Search component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected data.

The vulnerability of the PIA Search component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HT...

6.4CVSS6.7AI score0.01123EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder