657 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2020-2546
WebLogic Server DevOps Database
9.8
CRITICAL
EPSS
26.8%
2020 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-2931
Knowledge Web Database
9.8
CRITICAL
EPSS
1.9%
2020 1 PoC

Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter). Supported versions that are affected are 8.6.0-8.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-29574
🔥 KEV Software Genérico Database
9.8
CRITICAL
EPSS
12.0%
2020 1 PoC

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.

Scanner Automatizado
Sin template local disponible
CVE-2020-13500
Aveva Database
9.8
CRITICAL
EPSS
0.3%
2020 CWE-89 1 PoC

SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter ClassName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

Scanner Automatizado
Sin template local disponible
CVE-2020-6141
OS4Ed Web Database
9.8
CRITICAL
EPSS
10.8%
2020 CWE-89 1 PoC

An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Scanner Automatizado
Sin template local disponible
CVE-2020-2555
🔥 KEV WebCenter Portal Database
9.8
CRITICAL
EPSS
93.1%
2020 15 PoCs

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-22452
Software Genérico Web Database
9.8
CRITICAL
EPSS
3.2%
2020 1 PoC

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

Scanner Automatizado
Sin template local disponible
CVE-2020-22819
Software Genérico Web Database
9.8
CRITICAL
EPSS
0.3%
2020 2 PoCs

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.

Scanner Automatizado
Sin template local disponible
CVE-2020-13501
Aveva Database
9.8
CRITICAL
EPSS
0.3%
2020 CWE-89 1 PoC

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

Scanner Automatizado
Sin template local disponible
CVE-2020-2801
WebLogic Server Database
9.8
CRITICAL
EPSS
4.5%
2020 2 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidenti

Scanner Automatizado
Sin template local disponible
CVE-2020-14859
WebLogic Server Database
9.8
CRITICAL
EPSS
7.6%
2020 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-14644
🔥 KEV WebLogic Server Database
9.8
CRITICAL
EPSS
93.6%
2020 2 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-6137
OS4Ed Web Database
9.8
CRITICAL
EPSS
0.7%
2020 CWE-89 1 PoC

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Scanner Automatizado
Sin template local disponible
CVE-2020-0618
🔥 KEV Microsoft SQL Server Database ⚡ nuclei
9.8
CRITICAL
EPSS
94.3%
2020 6 PoCs

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

Scanner Automatizado
nuclei -t CVE-2020-0618.yaml ⎘
CVE-2020-5722
🔥 KEV Grandstream UCM6200 Series Web Database ⚡ nuclei
9.8
CRITICAL
EPSS
92.7%
2020 3 PoCs

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.

Scanner Automatizado
nuclei -t CVE-2020-5722.yaml ⎘
CVE-2020-13499
Aveva Database
9.8
CRITICAL
EPSS
0.3%
2020 CWE-89 1 PoC

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

Scanner Automatizado
Sin template local disponible
CVE-2020-22820
Software Genérico Web Database
9.8
CRITICAL
EPSS
0.3%
2020 2 PoCs

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.

Scanner Automatizado
Sin template local disponible
CVE-2020-22818
Software Genérico Web Database
9.8
CRITICAL
EPSS
0.3%
2020 2 PoCs

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.

Scanner Automatizado
Sin template local disponible
CVE-2020-2791
Knowledge Web Database
9.8
CRITICAL
EPSS
1.6%
2020 1 PoC

Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible
CVE-2020-14645
WebLogic Server Database
9.8
CRITICAL
EPSS
92.3%
2020 6 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Scanner Automatizado
Sin template local disponible