CVE-2011-2237

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...

CVE-2011-3510

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security...

CVE-2011-2319

CVE-2011-2319 affects Oracle WebLogic Server within Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0. The vulnerability (described as unspecified) relates to JMS and can allow remote attackers to affect confidentiality. The linked sources do not provide a concrete root...

CVE-2011-2320

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

CVE-2011-3541

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters...

CVE-2011-2319

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

CVE-2011-2318

CVE-2011-2318 refers to an unspecified vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that allows local users to affect confidentiality (related to WLS Security). The description does not provide detai...

CVE-2011-3541

CVE-2011-3541 affects the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7. A root cause described in CPAI-2011-555 is an integer overflow in the CorelDRAW (cdr) file parser due to improper bounds checking, allowing a remote attacker to exploit by sending a malic...

CVE-2011-2314

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors related to JavaServer Pages...

CVE-2011-3523

Technical details for CVE-2011-3523 are not provided in the supplied documents. No clear affected components, impact, or fixes are disclosed here. Monitor official advisories for updates.

CVE-2011-3523

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...

CVE-2011-2255

Technical details about CVE-2011-2255 are not publicly available in the provided documents. Monitor for updates; no concrete affected products, root cause, or fixes are described here.

CVE-2011-2314

Technical details about CVE-2011-2314 are not publicly provided in the supplied connected documents. The entry only mentions an unspecified vulnerability in Oracle Containers for J2EE 10.1.2.3. Monitor for updates.

Oracle Releases Critical Patch Update for October 2011

Oracle has released its Critical Patch Update and Java SE Critical Patch Update Advisory for October 2011 to address 77 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 10 for Oracle Fusion Middleware 5 for Oracle E-Business...

VMSA-2011-0011 VMware hosted products address remote code execution vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2011-0011 Synopsis: VMware hosted products address remote code execution vulnerability Issue date: 2011-10-04 Updated on: 2011-10-04...

CVE-2010-4931

Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folderlevel parameter. NOTE: this issue has been disputed by a reliable third party...

Directory traversal

Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folderlevel parameter. NOTE: this issue has been disputed by a reliable third party...

CVE-2010-4931

Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folderlevel parameter. NOTE: this issue has been disputed by a reliable third party...

CVE-2010-4931

PHP-Fusion exposes a directory traversal flaw in maincore.php, allowing local file inclusion via a ../ detour in the folder_level parameter. Impact stated as remote code execution on affected environments through arbitrary local files. Affected product: PHP-Fusion (maincore.php). Root cause: dire...

CVE-2011-3868

CVE-2011-3868 affects VMware products: Workstation 7.x before 7.1.5, Player 3.x before 3.1.5, Fusion 3.1.x before 3.1.3, and VMware AMS. A crafted UDF filesystem in an ISO image can lead to remote code execution. Mitigation per the initial description is to update to the listed fixed versions (7....