Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2964 matches found

exploitpack
exploitpack•added 2018/10/25 12:0 a.m.•25 views

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

Oracle Weblogic Server - Deserialization Remote Command Execution Patch Bypass // All respects goes to Zhiyi Zhang of 360 ESG Codesafe Team // URL: https://blogs.projectmoon.pw/2018/10/19/Oracle-WebLogic-Two-RCE-Deserialization-Vulnerabilities/ package ysoserial.payloads; import...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2018/10/18 12:0 a.m.•516 views

Oracle WebLogic Server Multiple Vulnerabilities (October 2018 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - Vulnerabilities in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Easily exploitable vulnerabilities allow unauthenticated attacker wi...

9.8CVSS6.8AI score0.94281EPSS
SaveExploits5References12
OSV
OSV•added 2018/10/17 1:31 a.m.•4 views

CVE-2018-3252

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

9.8CVSS7.3AI score0.28007EPSS
SaveExploits0References4
NVD
NVD•added 2018/10/17 1:31 a.m.•21 views

CVE-2018-3246

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS6.7AI score0.0289EPSS
SaveExploits0References4
NVD
NVD•added 2018/10/17 1:31 a.m.•27 views

CVE-2018-3245

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

9.8CVSS8.9AI score0.94281EPSS
SaveExploits4References4
NVD
NVD•added 2018/10/17 1:31 a.m.•25 views

CVE-2018-3250

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.1CVSS5.4AI score0.01563EPSS
SaveExploits0References3
OSV
OSV•added 2018/10/17 1:31 a.m.•7 views

CVE-2018-3248

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.5CVSS7.3AI score0.02449EPSS
SaveExploits0References3
OSV
OSV•added 2018/10/17 1:31 a.m.•8 views

CVE-2018-3250

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.1CVSS7.3AI score
SaveExploits0References3
OSV
OSV•added 2018/10/17 1:31 a.m.•5 views

CVE-2018-3249

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

6.5CVSS7.3AI score0.02061EPSS
SaveExploits0References3
NVD
NVD•added 2018/10/17 1:31 a.m.•25 views

CVE-2018-3249

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

6.5CVSS5.7AI score0.02061EPSS
SaveExploits0References3
OSV
OSV•added 2018/10/17 1:31 a.m.•2 views

CVE-2018-3245

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

9.8CVSS7.3AI score0.94281EPSS
SaveExploits4References4
NVD
NVD•added 2018/10/17 1:31 a.m.•25 views

CVE-2018-3248

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

6.5CVSS5.6AI score0.02449EPSS
SaveExploits0References3
NVD
NVD•added 2018/10/17 1:31 a.m.•29 views

CVE-2018-3213

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Docker Images. The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

7.5CVSS6.7AI score0.04361EPSS
SaveExploits1References4
OSV
OSV•added 2018/10/17 1:31 a.m.•8 views

CVE-2018-3197

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

9.8CVSS7.3AI score0.03333EPSS
SaveExploits0References3
NVD
NVD•added 2018/10/17 1:31 a.m.•23 views

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

9.8CVSS8.9AI score0.63188EPSS
SaveExploits0References3
NVD
NVD•added 2018/10/17 1:31 a.m.•23 views

CVE-2018-2902

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...

4.3CVSS2.8AI score0.01528EPSS
SaveExploits0References3
OSV
OSV•added 2018/10/17 1:31 a.m.•4 views

CVE-2018-2902

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...

4.3CVSS7.3AI score0.01528EPSS
SaveExploits0References3
Prion
Prion•added 2018/10/17 1:31 a.m.•27 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

4CVSS6AI score0.02061EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2018/10/17 1:31 a.m.•24 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5CVSS7.2AI score0.0289EPSS
SaveExploits0References4Affected Software9
Prion
Prion•added 2018/10/17 1:31 a.m.•19 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

4.3CVSS6AI score0.02449EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder