Lucene search
+L

16187 matches found

CNVD
CNVD
•added 2021/07/21 12:00 a.m.•50 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54722)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

7.5CVSS3.9AI score0.01442EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•60 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54723)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

7.5CVSS3.9AI score0.01063EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•43 views

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-59238)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and many other applications in one seamlessly integrated management suite. Oracle...

5.5CVSS1.8AI score0.00931EPSS
SaveExploits0Affected Software2
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•50 views

Unauthorized Access Vulnerability in Oracle Outside In Technology

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. An unauthorized access vulnerability exists in the Outside In...

7.5CVSS7AI score0.01142EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•55 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-56430)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component in Oracle Outside In Technology version 8.5...

7.5CVSS4AI score0.01142EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•49 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54724)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. An...

7.5CVSS7.4AI score0.01063EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•62 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-56432)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

7.5CVSS3.9AI score0.01063EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/20 10:45 p.m.•104 views

CVE-2021-2453

CVE-2021-2453 affects Oracle Outside In Technology (Outside In Filters) as part of Oracle Fusion Middleware. Affected product/version: Outside In Filters in Oracle Outside In Technology, version 8.5.5. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to cause a ...

7.5CVSS7.5AI score0.01063EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/07/20 10:44 p.m.•87 views

CVE-2021-2420

CVE-2021-2420 affects Oracle Outside In Technology (Fusion Middleware), specifically the Outside In Filters component. Affected version: 8.5.5. The vulnerability is described as unauthenticated remote access over HTTP that can lead to a hang or frequent crashes (complete DoS) of Oracle Outside In...

7.5CVSS7.2AI score0.01142EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/07/20 12:15 p.m.•13 views

CVE-2021-27517

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

6.1CVSS6.8AI score0.0077EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/20 12:15 p.m.•45 views

CVE-2021-27517

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

6.1CVSS0.0077EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/20 12:15 p.m.•28 views

Code injection

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

4.3CVSS6.5AI score0.0077EPSS
SaveExploits0References1Affected Software2
attackerkb
attackerkb
•added 2021/07/20 12:15 p.m.•8 views

CVE-2021-27517

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

6.1CVSS6.9AI score0.0077EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/07/20 11:38 a.m.•30 views

CVE-2021-27517

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

6.8AI score0.0077EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/20 11:38 a.m.•65 views

CVE-2021-27517

The CVE-2021-27517 issue affects Foxit PDF SDK for Web (up to version 7.5.0). The root cause is the handling of PDFs containing embedded Acrobat JavaScript (specifically app.alert), which enables Cross-Site Scripting (XSS) in the browser when a victim uploads a malicious PDF. The documents consis...

6.1CVSS6.5AI score0.0077EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-17490

Name of the Vulnerable Software and Affected Versions Foxit PDF SDK For Web versions prior to 7.5.1 is not specified, however, Foxit PDF SDK For Web through 7.5.0 is mentioned as vulnerable. Foxit PDF SDK For Web versions through 7.5.0 Description The issue allows for arbitrary JavaScript code...

6.1CVSS0.0077EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•8 views

CVE-2021-27517: Improper Neutralization of Input During Web Page Generation

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

6.1CVSS6.2AI score0.0077EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•6 views

CVE-2021-2361: Undefined Security Weakness

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS5.7AI score0.00931EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•1 views

PT-2021-7157

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the SDK client integration component of Oracle Advanced Inbound...

8.5CVSS0.00931EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2021/07/19 12:14 p.m.•28 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect OS Images for Red Hat Linux Systems used by IBM Cloud Pak System (Jan2021 updates)

Summary Multiple vulnerabilities have been found in IBM® SDK Java™ Technology Edition V8 used by the OS Images for IBM Cloud Pak System. The issues were disclosed in the Oracle January 2021 Critical Patch Update, plus CVE-2020-27221. OS Image addressed applicable CVEs. Vulnerability Details CVEID...

9.8CVSS0.7AI score0.03186EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder