Vendor CVEs

Oracle Corporation

All CVEs

10,082 total · sorted by risk

CVE	Vendor / Product	CVSS	EPSS	Published	Description
CVE-2011-0785	Oracle Corporation Database Server	—	0.01	Apr 20, 2011	Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity…
CVE-2011-0412	Sun Corporation Sunos	—	0.00	Apr 19, 2011	Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
CVE-2011-1554	Xpdf Xpdf	—	0.05	Mar 31, 2011	Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer…
CVE-2011-1553	Glyphandcog Xpdfreader	—	0.05	Mar 31, 2011	Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write,…
CVE-2011-1420	EMC Corporation Data Protection Advisor	—	0.00	Mar 28, 2011	EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVE-2010-4475	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4474	Sun Corporation Java SE	—	0.00	Feb 17, 2011	Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.
CVE-2010-4473	Sun Corporation Jre	—	0.05	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4472	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained…
CVE-2010-4471	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown…
CVE-2010-4470	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was…
CVE-2010-4469	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4468	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity…
CVE-2010-4467	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…
CVE-2010-4466	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier for Windows allows remote untrusted Java Web Start…
CVE-2010-4465	Sun Corporation Jre	—	0.04	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4463	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…
CVE-2010-4462	Sun Corporation Jre	—	0.05	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4454	Sun Corporation Jre	—	0.05	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4451	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2010-4450	Sun Corporation Jre	—	0.00	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone…
CVE-2010-4448	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via…
CVE-2010-4447	Sun Corporation Jre	—	0.02	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4422	Sun Corporation Jre	—	0.03	Feb 17, 2011	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2010-4506	Passlogix v-GO Self-Service Password Reset (SSPR)	—	0.01	Feb 7, 2011	Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the…
CVE-2010-4464	Oracle Corporation Sun Convergence	—	0.02	Jan 19, 2011	Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.
CVE-2010-4461	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #23, 9.0 Bundle #14, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.
CVE-2010-4460	Sun Corporation Sunos	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon.
CVE-2010-4458	Sun Corporation Sunos	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS.
CVE-2010-4457	Sun Corporation Sunos	—	0.02	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS.
CVE-2010-4456	Sun Corporation Java System Communications Express	—	0.02	Jan 19, 2011	Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail.
CVE-2010-4455	Oracle Corporation Fusion Middleware	—	0.02	Jan 19, 2011	Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.
CVE-2010-4453	Oracle Corporation Weblogic Server	—	0.01	Jan 19, 2011	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.
CVE-2010-4449	Oracle Corporation Audit Vault	—	0.03	Jan 19, 2011	Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not…
CVE-2010-4446	Sun Corporation Sunos	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand.
CVE-2010-4445	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.
CVE-2010-4444	Sun Corporation Java System Access Manager	—	0.02	Jan 19, 2011	Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-4443	Sun Corporation Sunos	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS.
CVE-2010-4442	Sun Corporation Sunos	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.
CVE-2010-4441	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.
CVE-2010-4439	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to eProfile - Manager Desktop.
CVE-2010-4438	Oracle Corporation Java System Message Queue	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
CVE-2010-4436	Oracle Corporation Sunmc	—	0.01	Jan 19, 2011	Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console.
CVE-2010-4434	Oracle Corporation Peoplesoft Enterprise	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.0 through 8.50.14 and 8.51.0 through 8.51.04 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.
CVE-2010-4433	Sun Corporation Sunos	—	0.02	Jan 19, 2011	Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component.
CVE-2010-4432	Oracle Corporation Supply Chain Products Suite	—	0.01	Jan 19, 2011	Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.
CVE-2010-4431	Sun Corporation Java System Portal Server	—	0.00	Jan 19, 2011	Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.
CVE-2010-4430	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
CVE-2010-4429	Oracle Corporation Supply Chain Products Suite	—	0.01	Jan 19, 2011	Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505.
CVE-2010-4428	Oracle Corporation Peoplesoft Enterprise Hrms	—	0.01	Jan 19, 2011	Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.

CVE-2011-0785Apr 20, 2011
Oracle Corporation
Database Server
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity…
CVE-2011-0412Apr 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
CVE-2011-1554Mar 31, 2011
Xpdf
Xpdf
risk 0.00cvss —epss 0.05
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer…
CVE-2011-1553Mar 31, 2011
Glyphandcog
Xpdfreader
risk 0.00cvss —epss 0.05
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write,…
CVE-2011-1420Mar 28, 2011
EMC Corporation
Data Protection Advisor
risk 0.00cvss —epss 0.00
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVE-2010-4475Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4474Feb 17, 2011
Sun Corporation
Java SE
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.
CVE-2010-4473Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4472Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained…
CVE-2010-4471Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown…
CVE-2010-4470Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was…
CVE-2010-4469Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4468Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity…
CVE-2010-4467Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…
CVE-2010-4466Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier for Windows allows remote untrusted Java Web Start…
CVE-2010-4465Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.04
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4463Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via…
CVE-2010-4462Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4454Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2010-4451Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2010-4450Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone…
CVE-2010-4448Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via…
CVE-2010-4447Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect…
CVE-2010-4422Feb 17, 2011
Sun Corporation
Jre
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2010-4506Feb 7, 2011
Passlogix
v-GO Self-Service Password Reset (SSPR)
risk 0.00cvss —epss 0.01
Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the…
CVE-2010-4464Jan 19, 2011
Oracle Corporation
Sun Convergence
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.
CVE-2010-4461Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #23, 9.0 Bundle #14, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.
CVE-2010-4460Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon.
CVE-2010-4458Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS.
CVE-2010-4457Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS.
CVE-2010-4456Jan 19, 2011
Sun Corporation
Java System Communications Express
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail.
CVE-2010-4455Jan 19, 2011
Oracle Corporation
Fusion Middleware
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.
CVE-2010-4453Jan 19, 2011
Oracle Corporation
Weblogic Server
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.
CVE-2010-4449Jan 19, 2011
Oracle Corporation
Audit Vault
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not…
CVE-2010-4446Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand.
CVE-2010-4445Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.
CVE-2010-4444Jan 19, 2011
Sun Corporation
Java System Access Manager
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-4443Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS.
CVE-2010-4442Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.
CVE-2010-4441Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.
CVE-2010-4439Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to eProfile - Manager Desktop.
CVE-2010-4438Jan 19, 2011
Oracle Corporation
Java System Message Queue
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
CVE-2010-4436Jan 19, 2011
Oracle Corporation
Sunmc
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console.
CVE-2010-4434Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.0 through 8.50.14 and 8.51.0 through 8.51.04 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.
CVE-2010-4433Jan 19, 2011
Sun Corporation
Sunos
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component.
CVE-2010-4432Jan 19, 2011
Oracle Corporation
Supply Chain Products Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.
CVE-2010-4431Jan 19, 2011
Sun Corporation
Java System Portal Server
risk 0.00cvss —epss 0.00
Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.
CVE-2010-4430Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
CVE-2010-4429Jan 19, 2011
Oracle Corporation
Supply Chain Products Suite
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505.
CVE-2010-4428Jan 19, 2011
Oracle Corporation
Peoplesoft Enterprise Hrms
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.

Page 182 of 202