Lucene search
+L

300 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2003-1211

Malware in sbrugna...

5CVSS6.4AI score0.00872EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-22760

Malware in sbrugna...

7.5CVSS7.9AI score0.02249EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/05/29 6:44 p.m.8 views

org.onosproject:onos-drivers-arista (>=1.7.0 <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0 <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0 <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0-rc1 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

9.8CVSS5.8AI score0.00347EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 5:51 a.m.5 views

CVE-2023-22089

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

9.8CVSS7.1AI score0.00705EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:20 a.m.5 views

CVE-2023-21838

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

7.5CVSS6.3AI score0.00857EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:48 a.m.20 views

CVE-2022-4332

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full...

6.8CVSS7.6AI score0.00335EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:11 p.m.9 views

CVE-2005-4765

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to...

7.6CVSS7.2AI score0.02075EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:16 p.m.8 views

CVE-2020-2963

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to...

7.2CVSS6.5AI score0.01384EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/01/23 12:0 a.m.8 views

Sprecher Automation SPRECON-E-C/P/T3 Improper Input Validation (CVE-2022-4332)

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full...

6.8CVSS6.7AI score0.00335EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/01/22 12:0 a.m.16 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows attackers to disclose protected information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information using the T3/IIOP protocol...

7.8CVSS7.6AI score0.49689EPSS
Exploits3References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.7 views

PT-2025-4257

The vulnerable software is Oracle WebLogic Server, specifically the Core component of Oracle Fusion Middleware. The affected versions are 12.2.1.4.0 and 14.1.1.0.0. This issue allows an unauthenticated attacker to remotely compromise a WebLogic server via T3 or IIOP protocols, potentially leading...

10CVSS7.7AI score0.008EPSS
Exploits0References26
CISA KEV Catalog
CISA KEV Catalog
added 2025/01/07 12:0 a.m.24 views

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3...

9.8CVSS7.2AI score0.94928EPSS
In wildExploits11
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.5 views

PT-2024-6823

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description The issue is related to a vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware, specifically in the Core component. This vulnerability allows an...

10CVSS7.2AI score0.00709EPSS
Exploits0References50
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.5 views

PT-2024-6926 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server. Th...

7.8CVSS8.1AI score0.00682EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2024/09/18 12:0 a.m.43 views

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution...

9.8CVSS7.5AI score0.94465EPSS
In wildExploits1
Tenable Nessus
Tenable Nessus
added 2024/07/19 12:0 a.m.323 views

Oracle WebLogic Server (July 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that a...

9.8CVSS7AI score0.49689EPSS
Exploits5References8
OSV
OSV
added 2024/07/16 11:15 p.m.5 views

CVE-2024-21182

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS7.3AI score0.49689EPSS
Exploits3References1
NVD
NVD
added 2024/07/16 11:15 p.m.37 views

CVE-2024-21182

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS0.49689EPSS
Exploits3References2
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.6 views

PT-2024-5587 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3 ...

10CVSS7.9AI score0.01119EPSS
Exploits0References7
Veracode
Veracode
added 2024/06/17 6:46 a.m.12 views

Cross-site Scripting (XSS)

TYPO3 is vulnerable to cross-site scripting XSS. The vulnerability is due to improper handling of t3:// URLs and typolink functionality, affecting both backend forms and frontend extensions that use typolink rendering...

6.4AI score
Exploits0
Rows per page
Query Builder