CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

592 matches found

CNVD•added 2018/11/02 12:00 a.m.•11 views

Artifex MuPDF Buffer Overflow Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A buffer overflow vulnerability exists in the 'fzrunt3glyph' function in the fitz/font.c file in Artifex MuPDF version 1.14.0. An attacker can exploit this vulnerability to cause an impact on usability...

5.5CVSS6.7AI score0.01607EPSS

SaveExploits1References1

Positive Technologies•added 2018/10/26 12:00 a.m.•8 views

PT-2018-14571 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue is related to an out-of-bounds read in the fz run t3 glyph function located in fitz/font.c. This has been demonstrated using the mutool utility. Recommendations: For Artifex MuPDF version...

9.8CVSS6.4AI score0.03645EPSS

SaveExploits14References44

OSV•added 2018/10/17 1:31 a.m.•9 views

CVE-2018-3252

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

9.8CVSS7.3AI score0.27802EPSS

SaveExploits0References4

OSV•added 2018/10/17 1:31 a.m.•6 views

CVE-2018-3245

9.8CVSS7.3AI score0.94281EPSS

SaveExploits4References4

NVD•added 2018/10/17 1:31 a.m.•36 views

CVE-2018-3197

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

9.8CVSS8.9AI score0.03333EPSS

SaveExploits0References3

OSV•added 2018/10/17 1:31 a.m.•15 views

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

9.8CVSS7.3AI score0.03333EPSS

SaveExploits0References3

NVD•added 2018/10/17 1:31 a.m.•34 views

CVE-2018-3201

9.8CVSS8.9AI score0.03333EPSS

SaveExploits0References3

OSV•added 2018/10/17 1:31 a.m.•12 views

CVE-2018-3191

9.8CVSS7.3AI score0.62936EPSS

SaveExploits0References3

Vulnrichment•added 2018/10/17 1:00 a.m.•21 views

CVE-2018-3191

7.3AI score0.62936EPSS

SaveExploits0References3

Cvelist•added 2018/10/17 1:00 a.m.•45 views

CVE-2018-3197

9.3AI score0.03333EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•2 views

CVE-2018-3245: Deserialization of Untrusted Data

9.8CVSS8AI score0.94281EPSS

SaveExploits4References2

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•1 views

CVE-2018-3191: Undefined Security Weakness

9.8CVSS8AI score0.62936EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•3 views

CVE-2018-3252: Undefined Security Weakness

9.8CVSS8AI score0.27802EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•6 views

CVE-2018-3213: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Docker Images. The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

7.5CVSS7.3AI score0.04361EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•2 views

CVE-2018-3197: Undefined Security Weakness

9.8CVSS8.1AI score0.03333EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/10/17 12:00 a.m.•8 views

CVE-2018-3201: Undefined Security Weakness

9.8CVSS8.1AI score0.03333EPSS

SaveExploits0References1

Exploit DB•added 2018/08/13 12:00 a.m.•141 views

Oracle Weblogic Server - Deserialization Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Oracle Weblogic Server Deserialization RCE', 'Description' = %q An unauthenticated attacker with network...

9.8CVSS8.3AI score0.99958EPSS

SaveExploits72

zdt•added 2018/08/11 12:00 a.m.•116 views

Oracle Weblogic Server Deserialization Remote Code Execution Exploit

Exploit for multiple platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Oracle Weblogic Server Deserialization RCE',...

7.5CVSS8.4AI score0.99958EPSS

SaveExploits72

Packet Storm•added 2018/08/10 12:00 a.m.•649 views

Oracle Weblogic Server Deserialization Remote Code Execution

7.5CVSS8.3AI score0.99958EPSS

SaveExploits72

BDU FSTEC•added 2018/08/03 12:00 a.m.•23 views

The vulnerability of the WLS Core Components of the WebLogic Server application server allows a hacker to gain full control over the application.

The vulnerability of the WLS Core Components of the WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the T3 protocol...

9.8CVSS8.2AI score0.71196EPSS

SaveExploits14References4Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by