Lucene search
+L
VulnrichmentMost viewed

180343 matches found

Vulnrichment
Vulnrichment
added 2018/08/01 8:00 p.m.28 views

CVE-2018-0391

A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is due to insufficient validation of a password change request. An attacker could exploit this...

7.1AI score0.02714EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/07/18 11:00 p.m.28 views

CVE-2018-0372

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

6.9AI score0.0254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/07/18 1:00 p.m.28 views

CVE-2018-2948

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

6.1AI score0.01542EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/07/18 1:00 p.m.28 views

CVE-2018-2899

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

6.2AI score0.01533EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/07/18 1:00 p.m.28 views

CVE-2018-2976

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Networking. The supported version that is affected is 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterpri...

6.7AI score0.02223EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/06/21 11:00 a.m.28 views

CVE-2018-0364

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CS...

7.4AI score0.0071EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/06/21 11:00 a.m.28 views

CVE-2018-0337

A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file...

7.5AI score0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/06/07 12:00 p.m.28 views

CVE-2018-0322

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

7.4AI score0.02591EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/06/07 12:00 p.m.28 views

CVE-2018-0353

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

7AI score0.03839EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/04/19 2:00 a.m.28 views

CVE-2018-2628

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

9.4AI score0.99448EPSS
SaveExploits70References7
Vulnrichment
Vulnrichment
added 2018/04/19 2:00 a.m.28 views

CVE-2018-2748

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

6.2AI score0.01467EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/04/19 2:00 a.m.28 views

CVE-2018-2850

Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications subcomponent: Fleet Management System Suite. The supported version that is affected is 9.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

6.5AI score0.01224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/03/28 10:00 p.m.28 views

CVE-2018-0195

A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and use the API to perform privileged actions on an affected device. The vulnerability is due to insufficient authorization checks for requests that are sent to t...

6.9AI score0.01257EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/03/08 7:00 a.m.28 views

CVE-2018-0209

A vulnerability in the Simple Network Management Protocol SNMP subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device n...

6.9AI score0.0158EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2017/10/19 5:00 p.m.28 views

CVE-2017-10353

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

6.5AI score0.01527EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2017/09/12 2:00 a.m.28 views

CVE-2017-7734

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions...

6.8AI score0.00787EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/08/08 3:00 p.m.28 views

CVE-2017-10012

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Operations. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

5.5AI score0.01178EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/08/08 3:00 p.m.28 views

CVE-2017-10206

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Engagement. The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

6.4AI score0.01844EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/08/08 3:00 p.m.28 views

CVE-2017-10172

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

6.2AI score0.0147EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/08/08 3:00 p.m.28 views

CVE-2017-10072

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: All Modules. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged...

5.5AI score0.01178EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/05/11 1:00 a.m.28 views

CVE-2017-2680

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected...

7.1CVSS6.4AI score0.01149EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2017/05/03 2:00 p.m.28 views

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

7AI score0.0066EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2017/04/24 7:00 p.m.28 views

CVE-2017-3536

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

5.3AI score0.00947EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2017/02/07 7:02 a.m.28 views

CVE-2016-10044

The aiomount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an iosetup system call...

6.8AI score0.00301EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2017/01/27 10:01 p.m.28 views

CVE-2017-3330

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: Open UI. The supported version that is affected is 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require...

6.9AI score0.01177EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2016/10/25 2:00 p.m.28 views

CVE-2016-8295

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors...

5.8AI score0.01694EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2016/07/21 10:00 a.m.28 views

CVE-2016-3564

Unspecified vulnerability in the Oracle TopLink component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JPA-RS...

6.2AI score0.04517EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2016/04/21 10:00 a.m.28 views

CVE-2016-0638

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service...

6AI score0.62924EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2016/04/21 10:00 a.m.28 views

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

5.5AI score0.01547EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2012/08/25 9:00 p.m.28 views

CVE-2010-5175

Race condition in PrivateFirewall 7.0.20.37 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

7AI score0.00306EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2005/07/14 4:00 a.m.28 views

CVE-2002-2024

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for 1 poppassd.php3, 2 login.php3?reason=chpass2, 3 spelling.php3, and 4 ldap.search.php3?ldapserv=nonsense which leaks the information in error messages...

6.8AI score0.01924EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/28 11:29 a.m.27 views

CVE-2026-5934 WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocketbeacon AJAX endpoint. This makes it possible for unauthenticated...

7.2CVSS6AI score0.0019EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/20 9:43 p.m.27 views

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

10CVSS5.5AI score0.01555EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/18 3:46 p.m.27 views

CVE-2026-45115 MyBB: Buddy/ignore list username XSS

MyBB is free and open source forum software. Prior to 1.8.40, the Buddy/Ignore component does not sanitize usernames correctly, allowing attackers to perform JavaScript code injection through a specially crafted username. The User CP Buddy/Ignore list and the Select Buddies list in Private Messag...

8.7CVSS5.4AI score0.00292EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/08/16 6:00 a.m.27 views

CVE-2026-19712 Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store unfiltered HTML, allowing such users to perform Stored Cross-Site Scripting attacks against any visitor of the affecte...

5.3AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 3:35 p.m.27 views

CVE-2026-73325 Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load Deserialization

Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with...

8.4CVSS6.1AI score0.00261EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/12 6:00 a.m.27 views

CVE-2026-15249 Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link

The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts it into the page, allowing users with a role as low as Contributor to store a payload that executes in the browser of a user who views the content and clicks the affected element...

5.2AI score0.00157EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:07 p.m.27 views

CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability

...

7.8CVSS5.2AI score0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:05 p.m.27 views

CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability

...

7.8CVSS5.2AI score0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/06 2:27 p.m.27 views

CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

7.2CVSS5.5AI score0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/06 2:27 p.m.27 views

CVE-2026-61961 WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...

7.1CVSS5.4AI score0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/30 11:22 a.m.27 views

CVE-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS5.9AI score0.00323EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2026/07/14 6:45 p.m.27 views

CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability

...

8.8CVSS6.1AI score0.00964EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:10 p.m.27 views

CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability

...

8.3CVSS6.1AI score0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:09 p.m.27 views

CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability

...

9.8CVSS6.1AI score0.00974EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:07 p.m.27 views

CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS6.1AI score0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:07 p.m.27 views

CVE-2026-50473 Windows File Explorer Information Disclosure Vulnerability

...

5.5CVSS6.1AI score0.00479EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:07 p.m.27 views

CVE-2026-50463 Windows Kernel Information Disclosure Vulnerability

...

7.5CVSS6.1AI score0.01027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:06 p.m.27 views

CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

...

5.5CVSS6.1AI score0.00404EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:05 p.m.27 views

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

...

9.3CVSS6.1AI score0.00364EPSS
SaveExploits0References1
Total number of security vulnerabilities5000