Lucene search
K

64 matches found

NVD
NVD
added 2026/06/17 10:40 a.m.7 views

CVE-2026-35312

Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware component: Virtual Directory Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise...

9.8CVSS0.00518EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/16 12:0 a.m.10 views

PT-2026-49883

Name of the Vulnerable Software and Affected Versions Oracle Virtual Directory version 12.2.1.4.0 Oracle Virtual Directory version 14.1.2.0.0 Description An issue exists in the Virtual Directory Server component of the Oracle Fusion Middleware Oracle Virtual Directory product. An unauthenticated...

9.8CVSS5.8AI score0.00518EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-15108

Malware in sbrugna...

8.5CVSS8.6AI score0.01477EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-9098

Malware in sbrugna...

9.8CVSS7.3AI score0.02928EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-2016

Malware in sbrugna...

7.5CVSS7.8AI score0.01374EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 4:3 a.m.6 views

CVE-2015-9255

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

5.3CVSS6.6AI score0.01071EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:9 p.m.4 views

CVE-1999-0407

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...

10CVSS7.1AI score0.05126EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.214 views

ClanSphere 2011.3 Local File Inclusion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ClanSphere 2011.3 Local File Inclusion Vulnerability', 'Description' = %q This module exploits a directory traversal flaw found in Clansphere...

7.4AI score
Exploits0
CVE
CVE
added 2023/04/10 3:31 a.m.45 views

CVE-2014-125098

Dart http_server up to 0.9.5 is affected in the VirtualDirectory handler (lib/src/virtual_directory.dart). Malicious manipulation of request.uri.path enables cross-site scripting. The issue can be exploited remotely. Remediation: upgrade to version 0.9.6 (patch: 27c1cbd8125bb0369e675eb72e48218496...

6.1CVSS5.1AI score0.00617EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/10 12:0 a.m.8 views

PT-2023-10166 · Unknown · Dart Http Server

Name of the Vulnerable Software and Affected Versions: Dart http server versions up to 0.9.5 Description: A issue was found in the Directory Listing Handler component, specifically in the VirtualDirectory function of the lib/src/virtual directory.dart file. The manipulation of the request.uri.pat...

6.1CVSS4.7AI score0.00617EPSS
Exploits0References6
Broadcom
Broadcom
added 2020/07/06 12:0 a.m.5 views

BSA-2020-1043

Security Advisory ID : BSA-2020-1043 Component : Apache Tomcat Revision : 1.0: Final When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially...

7.5CVSS7.1AI score0.708EPSS
Exploits4
Packet Storm
Packet Storm
added 2020/03/12 12:0 a.m.835 views

SQL Server Reporting Services (SSRS) ViewState Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SQL Server Reporting Services SSRS ViewState Deserialization', 'Description' = %q A vulnerability exists within Microsoft's SQL Server Reporting...

6.5CVSS0.2AI score0.99046EPSS
Exploits14
Metasploit
Metasploit
added 2020/03/06 9:21 p.m.1026 views

SQL Server Reporting Services (SSRS) ViewState Deserialization

A vulnerability exists within Microsoft's SQL Server Reporting Services which can allow an attacker to craft an HTTP POST request with a serialized object to achieve remote code execution. The vulnerability is due to the fact that the serialized blob is not signed by the server. This module...

8.8CVSS8.9AI score0.99046EPSS
Exploits14
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:0 a.m.4 views

The vulnerability of the Virtual Directory Manager component of the Oracle Virtual Directory user data storage service allows a perpetrator to gain unauthorized access to data and cause a partial service failure.

The vulnerability of the Virtual Directory Manager component of the Oracle Virtual Directory authentication storage service is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data and cause a partial service failur...

6CVSS7.6AI score0.01477EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/10/19 12:0 a.m.1 views

Oracle Fusion Middleware Virtual Directory Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Virtual Directory is one of the virtual directory components. An access control error...

8.5CVSS8.4AI score0.01477EPSS
Exploits0References1
OSV
OSV
added 2018/10/17 1:31 a.m.3 views

CVE-2018-3253

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Manager. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

8.5CVSS7.3AI score0.01477EPSS
Exploits0References2
NVD
NVD
added 2018/10/17 1:31 a.m.17 views

CVE-2018-3253

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Manager. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

8.5CVSS6.1AI score0.01477EPSS
Exploits0References2
Prion
Prion
added 2018/10/17 1:31 a.m.12 views

Buffer overflow

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Manager. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

6CVSS6.6AI score0.01477EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/10/17 1:0 a.m.18 views

CVE-2018-3253

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Manager. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

6.8AI score0.01477EPSS
Exploits0References2
CVE
CVE
added 2018/10/17 1:0 a.m.47 views

CVE-2018-3253

The CVE-2018-3253 entry concerns Oracle Fusion Middleware’s Oracle Virtual Directory component (Virtual Directory Manager). Affected are 11.1.1.7.0 and 11.1.1.9.0. The vulnerability is described as exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauth...

8.5CVSS6.6AI score0.01477EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder