Search vulnerabilities

Results 425,868

CVE-2013-0353

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management.

CVE-2013-0359

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
CVE-2013-0369

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Query.

CVSS 2.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2013-0370

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2013-0374

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Database Cloning.

CVE-2013-3498

Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2014-0374

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2014-0375

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.

CVSS 2.0 · 5.8 Medium EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2013-0375

mysql: Unspecified vulnerability in the server replication of the Oracle MySQL server allows remote attackers to alter confidentiality and integrity

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.

CVSS 3.1 · 5.4 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Mariadb Oracle and 1 more
Products
CVE-2013-0376

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Diagnostics.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2013-0378

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Siebel Calendar, a different vulnerability than CVE-2013-0379.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2013-0386

mysql: unspecified DoS vulnerability related to Stored Procedure (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.

CVSS 2.0 · 6.8 Medium EPSS 3.0% KEV · Not listed
CVE-2011-0166

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778.

CVSS 2.0 · 5.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2013-0387

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to PeopleCode.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2013-0388

Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2014-0383

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0 and 11.1.2.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Identity Console.

CVSS 2.0 · 3.5 Low EPSS 1.1% KEV · Not listed
Vendors
CVE-2013-0395

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Security.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2013-3502

monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.

CVSS 2.0 · 6.5 Medium EPSS 53.7% KEV · Not listed
Vendors