16621 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2023-21928
Solaris Operating System Database
1.8
LOW
EPSS
0.2%
2023 1 PoC

Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:

Scanner Automatizado
Sin template local disponible
CVE-2021-2147
Sun ZFS Storage Appliance Kit (AK) Software Database
1.8
LOW
EPSS
0.1%
2021 1 PoC

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS

Scanner Automatizado
Sin template local disponible
CVE-2021-35618
MySQL Cluster Database
1.8
LOW
EPSS
0.3%
2021 1 PoC

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Scor

Scanner Automatizado
Sin template local disponible
CVE-2015-9452
Software Genérico Web Database Windows
N/A
UNKNOWN
EPSS
0.7%
2015 1 PoC

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.

Scanner Automatizado
Sin template local disponible
CVE-2014-6457
Software Genérico Database
N/A
UNKNOWN
EPSS
9.4%
2014 2 PoCs

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Scanner Automatizado
Sin template local disponible
CVE-2015-0458
Software Genérico Database
N/A
UNKNOWN
EPSS
8.0%
2015 3 PoCs

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Scanner Automatizado
Sin template local disponible
CVE-2015-0464
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2015 1 PoC

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote attackers to affect confidentiality via unknown vectors related to Security.

Scanner Automatizado
Sin template local disponible
CVE-2007-5504
Software Genérico Database
N/A
UNKNOWN
EPSS
4.1%
2007 1 PoC

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package.

Scanner Automatizado
Sin template local disponible
CVE-2014-4209
Software Genérico Database
N/A
UNKNOWN
EPSS
4.9%
2014 4 PoCs

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.

Scanner Automatizado
Sin template local disponible
CVE-2015-0421
Software Genérico Database
N/A
UNKNOWN
EPSS
0.1%
2015 1 PoC

Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.

Scanner Automatizado
Sin template local disponible
CVE-2015-9467
Software Genérico Web Database Windows
N/A
UNKNOWN
EPSS
0.7%
2015 1 PoC

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.

Scanner Automatizado
Sin template local disponible
CVE-2014-0393
Software Genérico Database
N/A
UNKNOWN
EPSS
0.5%
2014 2 PoCs

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to InnoDB.

Scanner Automatizado
Sin template local disponible
CVE-2015-1518
Software Genérico Web Database
N/A
UNKNOWN
EPSS
2.5%
2015 3 PoCs

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.

Scanner Automatizado
Sin template local disponible
CVE-2007-2207
Software Genérico Web Database
N/A
UNKNOWN
EPSS
1.9%
2007 1 PoC

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter.

Scanner Automatizado
Sin template local disponible
CVE-2007-2230
Software Genérico Database
N/A
UNKNOWN
EPSS
1.4%
2007 1 PoC

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and possibly other vectors.

Scanner Automatizado
Sin template local disponible
CVE-2015-4768
Software Genérico Database
N/A
UNKNOWN
EPSS
0.2%
2015 1 PoC

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics.

Scanner Automatizado
Sin template local disponible
CVE-2015-3166
PostgreSQL Database
N/A
UNKNOWN
EPSS
5.4%
2015 1 PoC

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.

Scanner Automatizado
Sin template local disponible
CVE-2015-1423
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.9%
2015 2 PoCs

Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.

Scanner Automatizado
Sin template local disponible
CVE-2014-6468
Software Genérico Database
N/A
UNKNOWN
EPSS
0.4%
2014 1 PoC

Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Scanner Automatizado
Sin template local disponible
CVE-2015-1829
Software Genérico Web Database
N/A
UNKNOWN
EPSS
1.0%
2015 1 PoC

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.

Scanner Automatizado
Sin template local disponible