Lucene search
K

12 matches found

Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.3 views

PT-2026-22512

A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch line end of the file src/lily build error.c of the component Error Reporting. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit ...

4.8CVSS5.6AI score0.00166EPSS
Exploits1References7
CNVD
CNVD
added 2023/03/13 12:0 a.m.52 views

Google Chrome Crash reporting component buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a boundary error in the Crash reporting component when handling untrusted input. A remote attacker could exploit this vulnerability to obtain...

6.5CVSS2.6AI score0.00524EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/08/14 12:0 a.m.3 views

The vulnerability of the Installation component of the Oracle Hospitality Reporting and Analytics software platform, related to insufficient validation of input data, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics software installation component is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.3CVSS7.3AI score0.0046EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.4 views

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP...

4CVSS6.3AI score0.00988EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/06 12:0 a.m.1 views

The vulnerability of the Global Protect Agent’s endpoint protection software lies in the lack of protection for service data, which allows attackers to read VPN cookie information.

The vulnerability of the reporting component of the Global Protect Agent for Linux software lies in the lack of protection for service data. Exploiting this vulnerability could allow attackers to read VPN cookie information...

5.2CVSS5.5AI score0.00289EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/07/15 6:15 p.m.4 views

CVE-2020-14616

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Reporting. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracl...

2.7CVSS6.5AI score0.00988EPSS
Exploits0References1
OSV
OSV
added 2019/07/11 7:15 p.m.3 views

CVE-2019-7003

A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions...

10CVSS7.6AI score0.01456EPSS
Exploits0References3
NVD
NVD
added 2019/07/11 7:15 p.m.17 views

CVE-2019-7003

A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions...

10CVSS9.9AI score0.01456EPSS
Exploits0References3
Prion
Prion
added 2019/07/11 7:15 p.m.18 views

Sql injection

A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions...

6.4CVSS9.9AI score0.01456EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/07/11 6:37 p.m.23 views

CVE-2019-7003 ACM SQL Injection

A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions...

9.3CVSS10AI score0.01456EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/07/11 12:0 a.m.6 views

PT-2019-18409 · Avaya · Avaya Control Manager

Name of the Vulnerable Software and Affected Versions: Avaya Control Manager versions 7.x and 8.0.x prior to 8.0.4.0 Description: A SQL injection issue in the reporting component could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other...

10CVSS9.9AI score0.01456EPSS
Exploits0References5
CNVD
CNVD
added 2018/01/22 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics Component

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

7.1CVSS6.6AI score0.00885EPSS
Exploits0References1
Rows per page
Query Builder