VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,471 total · sorted by risk
  • CVE-2014-2412Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.

  • CVE-2014-2411Apr 16, 2014
    Oracle Corporation
    Identity Analytics
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2014-2410Apr 16, 2014
    Oracle Corporation
    Java Se
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

  • CVE-2014-2409Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

  • CVE-2014-2408Apr 16, 2014
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."

  • CVE-2014-2407Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415,…

  • CVE-2014-2406Apr 16, 2014
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any…

  • CVE-2014-2404Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.

  • CVE-2014-2403Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

  • CVE-2014-2402Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.

  • CVE-2014-2401Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

  • CVE-2014-2400Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2399.

  • CVE-2014-2398Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

  • CVE-2014-2397Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-0465Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.

  • CVE-2014-0464Apr 16, 2014
    Oracle Corporation
    Java Se
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.

  • CVE-2014-0463Apr 16, 2014
    Oracle Corporation
    Java Se
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.

  • CVE-2014-0461Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0460Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

  • CVE-2014-0459Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.

  • CVE-2014-0458Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.

  • CVE-2014-0455Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.

  • CVE-2014-0454Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

  • CVE-2014-0453Apr 16, 2014
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

  • CVE-2014-0452Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

  • CVE-2014-0451Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.

  • CVE-2014-0450Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related to People Connection.

  • CVE-2014-0449Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

  • CVE-2014-0448Apr 16, 2014
    IBM
    Forms Viewer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

  • CVE-2014-0447Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2013-5876.

  • CVE-2014-0446Apr 16, 2014
    Oracle Corporation
    Java SE Embedded
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0442Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter Utility.

  • CVE-2014-0432Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.

  • CVE-2014-0426Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413.

  • CVE-2014-0421Apr 16, 2014
    Sun Corporation
    Sunos
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2014-0414Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling.

  • CVE-2014-0413Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426.

  • CVE-2014-0384Apr 16, 2014
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

  • CVE-2014-2706Apr 14, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.

  • CVE-2014-2678Apr 1, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks…

  • CVE-2014-1507Mar 19, 2014
    Mozilla Corporation
    Firefoxos
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile…

  • CVE-2014-1506Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies…

  • CVE-2014-1504Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed…

  • CVE-2014-1502Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.01

    The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.

  • CVE-2014-1501Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.

  • CVE-2014-1500Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.04

    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.

  • CVE-2014-1499Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

  • CVE-2014-1498Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports…

  • CVE-2014-1494Mar 19, 2014
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2013-4590Feb 26, 2014
    Apache
    Tomcat
    risk 0.00cvss —epss 0.09

    Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an…

Page 225 of 270