VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2014-2398Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

  • CVE-2014-2397Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-0465Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.

  • CVE-2014-0464Apr 16, 2014
    Oracle Corporation
    Java SE
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.

  • CVE-2014-0463Apr 16, 2014
    Oracle Corporation
    Java SE
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.

  • CVE-2014-0461Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0460Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

  • CVE-2014-0459Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.

  • CVE-2014-0458Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.

  • CVE-2014-0455Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.

  • CVE-2014-0454Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

  • CVE-2014-0453Apr 16, 2014
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

  • CVE-2014-0452Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

  • CVE-2014-0451Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.

  • CVE-2014-0450Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection.

  • CVE-2014-0449Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

  • CVE-2014-0448Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

  • CVE-2014-0447Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2013-5876.

  • CVE-2014-0446Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0442Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter Utility.

  • CVE-2014-0432Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.

  • CVE-2014-0426Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413.

  • CVE-2014-0421Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2014-0414Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling.

  • CVE-2014-0413Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426.

  • CVE-2014-0384Apr 16, 2014
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

  • CVE-2014-2706Apr 14, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.

  • CVE-2014-2678Apr 1, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks…

  • CVE-2014-1507Mar 19, 2014
    Mozilla Corporation
    Firefoxos
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile…

  • CVE-2014-1506Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies…

  • CVE-2014-1504Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed…

  • CVE-2014-1502Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.

  • CVE-2014-1501Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.

  • CVE-2014-1500Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.

  • CVE-2014-1499Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

  • CVE-2014-1498Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports…

  • CVE-2014-1494Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2013-4590Feb 26, 2014
    Apache
    Tomcat
    risk 0.00cvss —epss 0.09

    Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an…

  • CVE-2014-1876Feb 10, 2014
    Openjdk
    OpenJDK
    risk 0.00cvss —epss 0.00

    The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local…

  • CVE-2011-4093Feb 10, 2014
    libnet6
    libnet6
    risk 0.00cvss —epss 0.02

    Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

  • CVE-2011-4091Feb 10, 2014
    libnet6
    libnet6
    risk 0.00cvss —epss 0.03

    The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.

  • CVE-2014-1491Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes…

  • CVE-2014-1490Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service…

  • CVE-2014-1489Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

  • CVE-2014-1485Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by…

  • CVE-2014-1484Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.

  • CVE-2014-1483Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and…

  • CVE-2014-1480Feb 6, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a…

  • CVE-2013-5890Jan 15, 2014
    Oracle Corporation
    Payroll
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Exception Reporting.

  • CVE-2013-5889Jan 15, 2014
    Oracle Corporation
    Java SE
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and…

Page 156 of 201