Lucene search
K

7422 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.24 views

Oracle Application Testing Suite DownloadServlet reportName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing a reportName parameter...

7.8CVSS7.2AI score0.27519EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.34 views

Oracle Application Testing Suite DownloadServlet scriptPath Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing a scriptPath parameter...

7.8CVSS7.3AI score0.22011EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2016/01/25 12:0 a.m.21 views

x86_64 Linux xor/not/div Encoded execve Shellcode

x8664 Linux xor/not/div Encoded execve Shellcode. Shellcode exploit for linx86-64 platform /--------------------------------------------------------------------------------------------------------------------- / Title: x8664 linux-Xor/not/div encoded execve shellcode Author: Sathish kumar Contact...

Exploits0
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.75 views

Oracle Application Testing Suite Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Application Testing Suite. The specific flaw exists within the isAllowedUrl function. This function has a list of URI entries which do not require authentication. Because the function only...

7.5CVSS7.7AI score0.92719EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.19 views

Oracle Application Testing Suite DownloadServlet TMAPReportImage Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing a TMAPReportImage...

7.8CVSS7.3AI score0.21922EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.36 views

Oracle Application Testing Suite ReportImage tempfilename Parameter Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Application Testing Suite. Authentication is required but can be bypassed. The specific vulnerability is exposed by the ActionServlet servlet. In the ReportImage action, the tempfilename...

9CVSS7.8AI score0.54782EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.26 views

Oracle Application Testing Suite DownloadServlet scriptName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. By providing a scriptName parameter containi...

7.8CVSS7.3AI score0.21922EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/25 12:0 a.m.33 views

Oracle Application Testing Suite DownloadServlet Multiple Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. By providing repository, workspace, or...

7.8CVSS7.3AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00674)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00672)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Test Manager for Web Apps Component (CNVD-2016-00704)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Test Manager for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

6.4CVSS9.1AI score0.6531EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.3 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00675)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00694)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

5CVSS6.8AI score0.22011EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.3 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00693)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

5CVSS6.8AI score0.27519EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00673)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00692)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

5CVSS6.8AI score0.27519EPSS
Exploits0References1
CNVD
CNVD
added 2016/01/23 12:0 a.m.3 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Test Manager for Web Apps Component (CNVD-2016-00669)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Test Manager for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

6.4CVSS6.8AI score0.92719EPSS
Exploits5References1
NVD
NVD
added 2016/01/21 3:0 a.m.26 views

CVE-2016-0492

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

6.4CVSS5.8AI score0.92719EPSS
Exploits5References8
Rows per page
Query Builder