VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2014-2496Jul 17, 2014
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Test Framework.

  • CVE-2014-2495Jul 17, 2014
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing.

  • CVE-2014-2494Jul 17, 2014
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

  • CVE-2014-2493Jul 17, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces.

  • CVE-2014-2492Jul 17, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Web client (PC).

  • CVE-2014-2491Jul 17, 2014
    Oracle Corporation
    Siebel CRM
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205.

  • CVE-2014-2490Jul 17, 2014
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-2489Jul 17, 2014
    Oracle Corporation
    VM Virtualbox
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

  • CVE-2014-2488Jul 17, 2014
    Oracle Corporation
    VM Virtualbox
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.

  • CVE-2014-2487Jul 17, 2014
    Oracle Corporation
    VM Virtualbox
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related…

  • CVE-2014-2486Jul 17, 2014
    Oracle Corporation
    VM Virtualbox
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than…

  • CVE-2014-2485Jul 17, 2014
    Oracle Corporation
    Siebel CRM
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services.

  • CVE-2014-2484Jul 17, 2014
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.

  • CVE-2014-2483Jul 17, 2014
    Openjdk
    OpenJDK
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the…

  • CVE-2014-2482Jul 17, 2014
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Concurrent Processing component in Oracle E-Business Suite 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2014-2481Jul 17, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than…

  • CVE-2014-2480Jul 17, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than…

  • CVE-2014-2479Jul 17, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services.

  • CVE-2014-2456Jul 17, 2014
    Oracle Corporation
    Peoplesoft Products
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise ELS Enterprise Learning Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2014-0436Jul 17, 2014
    Oracle Corporation
    Hyperion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis.

  • CVE-2013-5855Jul 17, 2014
    Oracle Corporation
    Mojarra
    risk 0.00cvss —epss 0.05

    Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via…

  • CVE-2014-3487Jul 9, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.15

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF…

  • CVE-2014-3479Jul 9, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.15

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted…

  • CVE-2014-1542Jun 11, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.

  • CVE-2011-2198May 21, 2014
    GNOME Foundation
    Gnome Terminal
    risk 0.00cvss —epss 0.02

    The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string…

  • CVE-2014-2405May 14, 2014
    Sun Corporation
    Openjdk
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

  • CVE-2014-0462May 14, 2014
    Sun Corporation
    Openjdk
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405.

  • CVE-2014-3145May 11, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via…

  • CVE-2014-3144May 11, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of…

  • CVE-2014-1738May 11, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by…

  • CVE-2014-1737May 11, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to…

  • CVE-2014-1528Apr 30, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.06

    The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.

  • CVE-2014-1527Apr 30, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.

  • CVE-2014-2469Apr 17, 2014
    Oracle Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in lighttpd in Oracle Solaris 11.1 allows attackers to cause a denial of service via unknown vectors.

  • CVE-2014-2471Apr 16, 2014
    Oracle Corporation
    Ilearning
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.

  • CVE-2014-2470Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security.

  • CVE-2014-2468Apr 16, 2014
    Oracle Corporation
    Siebel CRM
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Open_UI, a different vulnerability than CVE-2014-4230.

  • CVE-2014-2467Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2014-2445.

  • CVE-2014-2466Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

  • CVE-2014-2465Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.

  • CVE-2014-2464Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

  • CVE-2014-2463Apr 16, 2014
    Oracle Corporation
    Virtualization
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-4232.

  • CVE-2014-2461Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote attackers to affect confidentiality via unknown vectors related to Security.

  • CVE-2014-2460Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote authenticated users to affect confidentiality via vectors related to CSV Management.

  • CVE-2014-2459Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.2 and 6.3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Security.

  • CVE-2014-2458Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install.

  • CVE-2014-2457Apr 16, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install.

  • CVE-2014-2455Apr 16, 2014
    Oracle Corporation
    Hyperion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface.

  • CVE-2014-2454Apr 16, 2014
    Oracle Corporation
    Hyperion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface.

  • CVE-2014-2453Apr 16, 2014
    Oracle Corporation
    Hyperion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface.

Page 154 of 201