Lucene search
+L

5660 matches found

NVD
NVD
•added 2017/10/19 5:29 p.m.•36 views

CVE-2017-10332

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

7.5CVSS7.1AI score0.0255EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/10/19 5:00 p.m.•45 views

CVE-2017-10332

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

7AI score0.0255EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2017/10/19 5:00 p.m.•24 views

CVE-2017-10332

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

6.4AI score0.0255EPSS
SaveExploits0References3
CVE
CVE
•added 2017/10/19 5:00 p.m.•98 views

CVE-2017-10332

CVE-2017-10332 affects Oracle E-Business Suite, Oracle Universal Work Queue (Administration). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.7. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the Oracle Universal Work Queue, potentially gai...

7.5CVSS7.2AI score0.0255EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/19 12:00 a.m.•3 views

CVE-2017-10332: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

7.5CVSS7.2AI score0.0255EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/10/18 12:00 a.m.•15 views

Oracle Universal Work Queue Unauthorized Access Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Oracle Universal Work Queue is on...

7.5CVSS7.7AI score0.0255EPSS
SaveExploits0References1
Prion
Prion
•added 2017/09/12 9:29 p.m.•26 views

Code injection

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538...

6CVSS5.4AI score0.00802EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2017/09/12 9:29 p.m.•13 views

CVE-2017-1352

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538...

5.5CVSS5.8AI score0.00802EPSS
SaveExploits0References3
NVD
NVD
•added 2017/09/12 9:29 p.m.•28 views

CVE-2017-1352

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538...

6CVSS5.4AI score0.00802EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/09/12 9:00 p.m.•40 views

CVE-2017-1352

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538...

5.4AI score0.00802EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/12 12:00 a.m.•5 views

CVE-2017-1352: Improper Neutralization of Special Elements used in a Command

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538...

6CVSS5.8AI score0.00802EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2017/09/05 12:00 a.m.•411 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 61 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 61.0.3163.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS8.3AI score0.26331EPSS
SaveExploits0Affected Software1
Akamai Blog
Akamai Blog
•added 2017/08/30 1:48 p.m.•41 views

Game Crunch Doesn't Always Have to be a Thing

You've been dreading the conversation. You know there's no way out of it, given the timeline. Your execs have made it clear that the very large marketing spend is going to hit during the week when two of your engineers were planning to be on vacation. You've got a brilliant team that has helped y...

6.7AI score
SaveExploits0
HackRead
HackRead
•added 2017/08/20 8:41 p.m.•65 views

Developer permanently deletes 3 months of work files; blames Visual Studio Code

By Waqas In our professional lives, stuff happens like this man who a few This is a post from HackRead.com Read the original post: Developer permanently deletes 3 months of work files; blames Visual Studio Code...

7AI score
SaveExploits0
NVD
NVD
•added 2017/08/09 6:29 p.m.•26 views

CVE-2017-1357

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684...

4.3CVSS4.4AI score0.00909EPSS
SaveExploits0References3
OSV
OSV
•added 2017/08/09 6:29 p.m.•6 views

CVE-2017-1357

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684...

4.3CVSS5.8AI score0.00909EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/08/09 6:00 p.m.•29 views

CVE-2017-1357

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684...

4.4AI score0.00909EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2017/07/28 6:56 p.m.•33 views

Today is System Administrator Appreciation Day

And we are enormously grateful. What started off as a tongue-and-cheek offshoot of Administrative Professionals Day has now become a special holiday that people around the world recognize and practice. Dear reader, today is System Administrator Appreciation Day. Let’s be honest, maintaining the...

7.1AI score
SaveExploits0
zdt
zdt
•added 2017/07/17 12:00 a.m.•58 views

Google Chrome RCE + Sandbox Escape 0day Exploit

Item name: Google Chrome RCE + Sandbox Escape 0day Exploit 2. Affected OS : Windows 10 3. Vulnerable Target application versions and reliability. If 32 bit only, is 64 bit vulnerable? The vulnerability is present in the 32-bit and 64-bit versions of Google Chrome. With this vulnerability, you...

2.1AI score
SaveExploits0
CNVD
CNVD
•added 2017/07/13 12:00 a.m.•14 views

SAP Netweaver Dynpro Engine Denial of Service Vulnerability (CNVD-2017-23558))

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform can provide development and runtime environment for SAP applications. disp + work is one of the task dispatcher. A security vulnerability exists in disp+work version 7400.12.21.3030...

7.8CVSS7.7AI score0.02502EPSS
SaveExploits0References1
Rows per page
Query Builder