Search vulnerabilities

Results 425,948

CVE-2015-0462

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

CVSS 2.0 · 4.0 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2014-6476

JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6527.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Products
Jdk Jre Rhel Extras and 1 more
CVE-2014-6479

Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via vectors related to OC4J Configuration.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2014-6480

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to System management.

CVSS 2.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2014-6482

Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via unknown vectors related to Updates Change Assistant.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2014-6486

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
CVE-2014-6489

mysql: unspecified vulnerability related to SERVER:SP (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP.

CVSS 2.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2014-6490

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user component.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Sun
Products
CVE-2014-6495

mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Juniper Mariadb Oracle and 1 more
Products
CVE-2014-6497

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Sun
Products
CVE-2014-6499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector.

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
CVE-2014-6500

mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed
Products
CVE-2014-6501

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via vectors related to SSH.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Sun
Products
CVE-2014-6502

OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0 · 2.6 Low EPSS 3.1% KEV · Not listed
Vendors
Products
Jdk Jre Enterprise Linux and 3 more
CVE-2014-6503

JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532.

CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Vendors
Products
CVE-2015-0470

OpenJDK: incorrect handling of default methods (Hotspot, 8065366)

Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Products
Jdk Jre Enterprise Linux and 1 more
CVE-2014-6510

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Sun
Products
CVE-2014-6514

Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2014-6516

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2014-6517

OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0 · 5.0 Medium EPSS 4.1% KEV · Not listed
Vendors
Products
Jdk Jre Jrockit and 2 more