CVEs

385,880 total · page 6847 of 7,718

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2010-2601	Rim Blackberry Enterprise Server	0.00	—	0.03	Oct 14, 2010	Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted…
CVE-2010-3903	Openconnect OpenConnect	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
CVE-2010-3902	Openconnect OpenConnect	0.00	—	0.02	Oct 14, 2010	OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
CVE-2010-3901	Openconnect OpenConnect	0.00	—	0.01	Oct 14, 2010	OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances…
CVE-2010-3900	Christian Dywan Midori	0.00	—	0.01	Oct 14, 2010	Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.
CVE-2010-3312	GNOME Foundation Epiphany	0.00	—	0.01	Oct 14, 2010	Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509…
CVE-2010-3192	GNU Glibc	0.00	—	0.02	Oct 14, 2010	Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated…
CVE-2010-3076	smbind smbind	0.00	—	0.02	Oct 14, 2010	The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the…
CVE-2010-3071	Bip bip	0.00	—	0.03	Oct 14, 2010	bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
CVE-2009-5009	Infradead Openconnect	0.00	—	0.01	Oct 14, 2010	Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
CVE-2009-5008	Cisco Systems, Inc. Secure Desktop	0.00	—	0.00	Oct 14, 2010	Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.
CVE-2009-5007	Cisco Systems, Inc. Anyconnect SSL VPN	0.00	—	0.00	Oct 14, 2010	The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.
CVE-2010-3521	Oracle Corporation PeopleSoft Enterprise HCM ePay	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10-C and 9.1 to Payroll Update 10-C allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2010-3520	Oracle Corporation Peoplesoft And Jdedwards Product Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #12, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…
CVE-2010-3519	Oracle Corporation Peoplesoft Enterprise Peopletools	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2010-3518	Oracle Corporation PeopleSoft Enterprise HCM GP - Japan	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #13, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…
CVE-2010-3517	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.
CVE-2010-3516	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand.
CVE-2010-3515	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver.
CVE-2010-3514	Oracle Corporation Sun Products Suite	0.03	—	0.04	Oct 14, 2010	Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.
CVE-2010-3513	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers.
CVE-2010-3512	Oracle Corporation Sun Products Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV (WebDAV).
CVE-2010-3511	Oracle Corporation Opensolaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle OpenSolaris allows local users to affect integrity and availability via unknown vectors related to Tooltalk.
CVE-2010-3509	Oracle Corporation Solaris	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler.
CVE-2010-3508	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones.
CVE-2010-3507	Oracle Corporation Solaris	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade.
CVE-2010-3506	Oracle Corporation Sun Products Suite	0.00	—	0.00	Oct 14, 2010	Unspecified vulnerability in the Oracle Explorer (Sun Explorer) component in Oracle Sun Products Suite 6.4 allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2010-3504	Oracle Corporation E Business Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-3503	Oracle Corporation Solaris	0.03	—	0.01	Oct 14, 2010	Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.
CVE-2010-3502	Oracle Corporation Siebel Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2010-3501	Oracle Corporation Fusion Middleware	0.00	—	0.03	Oct 14, 2010	Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to affect availability via unknown vectors.
CVE-2010-3500	Oracle Corporation Siebel Suite	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different…
CVE-2010-2419	Oracle Corporation Database Server	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Java Virtual Machine component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-2418	Oracle Corporation Territory Management	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2417	Oracle Corporation Supply Chain Products Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2010-2416	Oracle Corporation E Business Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2415	Oracle Corporation Database Server	0.04	—	0.10	Oct 14, 2010	Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.
CVE-2010-2414	Oracle Corporation Sun Products Suite	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-2413	Oracle Corporation Fusion Middleware	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2412	Oracle Corporation Database Server	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the OLAP component in Oracle Database Server 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2010-2411	Oracle Corporation Database Server	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Job Queue component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DBMS_IJOB.
CVE-2010-2410	Oracle Corporation Fusion Middleware	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409.
CVE-2010-2409	Oracle Corporation Fusion Middleware	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2410.
CVE-2010-2408	Oracle Corporation E Business Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2407	Oracle Corporation Database Server	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the XDK component in Oracle Database Server 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2406	Oracle Corporation Siebel Suite	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2010-2405	Oracle Corporation Siebel Suite	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different…
CVE-2010-2404	Oracle Corporation Irecruitment	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors related to Account.
CVE-2010-2396	Oracle Corporation Fusion Middleware	0.00	—	0.01	Oct 14, 2010	Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2395	Oracle Corporation Fusion Middleware	0.00	—	0.02	Oct 14, 2010	Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410.

CVE-2010-2601Oct 14, 2010
Rim
Blackberry Enterprise Server
risk 0.00cvss —epss 0.03
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted…
CVE-2010-3903Oct 14, 2010
Openconnect
OpenConnect
risk 0.00cvss —epss 0.01
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
CVE-2010-3902Oct 14, 2010
Openconnect
OpenConnect
risk 0.00cvss —epss 0.02
OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
CVE-2010-3901Oct 14, 2010
Openconnect
OpenConnect
risk 0.00cvss —epss 0.01
OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances…
CVE-2010-3900Oct 14, 2010
Christian Dywan
Midori
risk 0.00cvss —epss 0.01
Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.
CVE-2010-3312Oct 14, 2010
GNOME Foundation
Epiphany
risk 0.00cvss —epss 0.01
Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509…
CVE-2010-3192Oct 14, 2010
GNU
Glibc
risk 0.00cvss —epss 0.02
Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated…
CVE-2010-3076Oct 14, 2010
smbind
smbind
risk 0.00cvss —epss 0.02
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the…
CVE-2010-3071Oct 14, 2010
Bip
bip
risk 0.00cvss —epss 0.03
bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
CVE-2009-5009Oct 14, 2010
Infradead
Openconnect
risk 0.00cvss —epss 0.01
Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
CVE-2009-5008Oct 14, 2010
Cisco Systems, Inc.
Secure Desktop
risk 0.00cvss —epss 0.00
Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.
CVE-2009-5007Oct 14, 2010
Cisco Systems, Inc.
Anyconnect SSL VPN
risk 0.00cvss —epss 0.00
The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.
CVE-2010-3521Oct 14, 2010
Oracle Corporation
PeopleSoft Enterprise HCM ePay
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10-C and 9.1 to Payroll Update 10-C allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2010-3520Oct 14, 2010
Oracle Corporation
Peoplesoft And Jdedwards Product Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #12, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…
CVE-2010-3519Oct 14, 2010
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2010-3518Oct 14, 2010
Oracle Corporation
PeopleSoft Enterprise HCM GP - Japan
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #13, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and…
CVE-2010-3517Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.
CVE-2010-3516Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand.
CVE-2010-3515Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver.
CVE-2010-3514Oct 14, 2010
Oracle Corporation
Sun Products Suite
risk 0.03cvss —epss 0.04
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.
CVE-2010-3513Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers.
CVE-2010-3512Oct 14, 2010
Oracle Corporation
Sun Products Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV (WebDAV).
CVE-2010-3511Oct 14, 2010
Oracle Corporation
Opensolaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle OpenSolaris allows local users to affect integrity and availability via unknown vectors related to Tooltalk.
CVE-2010-3509Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler.
CVE-2010-3508Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones.
CVE-2010-3507Oct 14, 2010
Oracle Corporation
Solaris
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade.
CVE-2010-3506Oct 14, 2010
Oracle Corporation
Sun Products Suite
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Explorer (Sun Explorer) component in Oracle Sun Products Suite 6.4 allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2010-3504Oct 14, 2010
Oracle Corporation
E Business Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-3503Oct 14, 2010
Oracle Corporation
Solaris
risk 0.03cvss —epss 0.01
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.
CVE-2010-3502Oct 14, 2010
Oracle Corporation
Siebel Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2010-3501Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to affect availability via unknown vectors.
CVE-2010-3500Oct 14, 2010
Oracle Corporation
Siebel Suite
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different…
CVE-2010-2419Oct 14, 2010
Oracle Corporation
Database Server
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Virtual Machine component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-2418Oct 14, 2010
Oracle Corporation
Territory Management
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2417Oct 14, 2010
Oracle Corporation
Supply Chain Products Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2010-2416Oct 14, 2010
Oracle Corporation
E Business Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2415Oct 14, 2010
Oracle Corporation
Database Server
risk 0.04cvss —epss 0.10
Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.
CVE-2010-2414Oct 14, 2010
Oracle Corporation
Sun Products Suite
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-2413Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2412Oct 14, 2010
Oracle Corporation
Database Server
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the OLAP component in Oracle Database Server 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2010-2411Oct 14, 2010
Oracle Corporation
Database Server
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Job Queue component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DBMS_IJOB.
CVE-2010-2410Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409.
CVE-2010-2409Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2410.
CVE-2010-2408Oct 14, 2010
Oracle Corporation
E Business Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2407Oct 14, 2010
Oracle Corporation
Database Server
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the XDK component in Oracle Database Server 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2406Oct 14, 2010
Oracle Corporation
Siebel Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2010-2405Oct 14, 2010
Oracle Corporation
Siebel Suite
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different…
CVE-2010-2404Oct 14, 2010
Oracle Corporation
Irecruitment
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors related to Account.
CVE-2010-2396Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-2395Oct 14, 2010
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410.