Search vulnerabilities

Results 425,865

CVE-2012-0520

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
CVE-2012-0521

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 Bundle #9 allows remote authenticated users to affect confidentiality via unknown vectors related to Human Resources.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2012-0550

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.

CVSS 2.0 · 6.8 Medium EPSS 6.9% KEV · Not listed
Vendors
Products
CVE-2012-0552

Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 9.0 Critical EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2012-0559

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2012-0564

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Query.

CVSS 2.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
CVE-2012-0576

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 6.0.1 and 6.2.0 allows remote authenticated users to affect integrity via unknown vectors related to Core-Help.

CVSS 2.0 · 4.0 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2012-0577

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect availability via unknown vectors related to Core.

CVSS 2.0 · 3.5 Low EPSS 1.3% KEV · Not listed
Vendors
CVE-2012-0733

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.

CVSS 2.0 · 6.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Ibm
Products
CVE-2012-0734

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job.

CVSS 2.0 · 7.6 High EPSS 1.3% KEV · Not listed
Vendors
Ibm
Products
CVE-2012-0736

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbitrary code via a crafted web site.

CVSS 2.0 · 9.3 Critical EPSS 2.9% KEV · Not listed
Vendors
Ibm
Products
CVE-2012-0737

Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
CVE-2012-1327

dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391.

CVSS 2.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Ios
CVE-2012-1674

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2012-1688

mysql: unspecified DoS vulnerability related to DML (CPU Apr 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML.

CVSS 2.0 · 4.0 Medium EPSS 3.5% KEV · Not listed
Products
CVE-2012-1690

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1703.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed
Products
CVE-2012-1696

mysql: Unspecified vulnerability in the server optimizer subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
CVE-2012-1698

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.

CVSS 2.0 · 2.1 Low EPSS 1.4% KEV · Not listed
Vendors
Sun
Products
CVE-2012-1706

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Logging.

CVSS 2.0 · 4.7 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2012-1707

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than CVE-2012-1704.

CVSS 2.0 · 4.0 Medium EPSS 1.4% KEV · Not listed
Vendors