PT-2014-1929

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.13 Description The issue allows remote authenticated users to forge tickets by leveraging administrative access. This is due to the kadm5 randkey principal 3 function in lib/kadm5/srv/svr principal.c in kadmi...

CVE-2014-2477

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486...

CVE-2014-2486

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2477...

CVE-2014-2397: Undefined Security Weakness

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

CVE-2014-2421: Undefined Security Weakness

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

PT-2014-1266

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71, 7u51, and 8 Java SE Embedded version 7u51 Description The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB. It is associated with subcomponents of th...

CVE-2013-5883

Unspecified vulnerability in Oracle Solaris 8 allows local users to affect integrity and availability via unknown vectors related to Kernel...

CVE-2014-0404

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406...

CVE-2014-0404

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406...

PT-2013-1181

Name of the Vulnerable Software and Affected Versions RealtimeKit aka rtkit version 0.5 Description The issue allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a setuid process or pkexec process. This can lead to a violati...

PT-2013-1182

Name of the Vulnerable Software and Affected Versions spice-gtk versions 0.14 spice-gtk-python versions 0.14 spice-glib versions 0.14 spice-glib-devel versions 0.14 spice-gtk-devel versions 0.14 spice-gtk-debuginfo versions 0.14 spice-gtk-tools versions 0.14 Description The issue allows local use...

CVE-2013-3754: Undefined Security Weakness

Unspecified vulnerability in the Solaris Cluster component in Oracle and Sun Systems Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to HA for TimesTen...

PT-2013-1133

Name of the Vulnerable Software and Affected Versions X.org libFS version 1.0.4 and earlier xorg-server versions prior to 1.14.3-r2 libfs affected versions not specified Description The issue allows for a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer...

PT-2013-1125

Name of the Vulnerable Software and Affected Versions libXi versions 1.7.1 and earlier xorg-server versions prior to 1.14.3-r2 libXext versions 1.3.2 libX11 versions 1.6.0 libXt versions 1.1.4 libXfixes versions 5.0.1 libXinerama versions 1.1.3 libXrandr versions 1.4.1 libXp versions 1.0.2...

PT-2013-3236

Name of the Vulnerable Software and Affected Versions Java SE versions 7 Update 17 and earlier Java SE versions 6 Update 43 and earlier Java SE versions 5.0 Update 41 and earlier OpenJDK versions 6 and 7 Description The issue affects the Java Runtime Environment JRE component, allowing remote...

PT-2013-1080

Name of the Vulnerable Software and Affected Versions hplip versions prior to 3.14.1 hplip-gui versions 3.12.4 hplip-common versions 3.12.4 hplip-debuginfo versions 3.12.4 hplip-libs versions 3.12.4 libsane-hpaio versions 3.12.4 hpijs versions 3.12.4 Description The issue is related to the check...

CVE-2013-1480: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors relat...

PT-2013-2345

Name of the Vulnerable Software and Affected Versions Java SE versions 5.0 through Update 38 Java SE versions 6 through Update 38 Java SE versions 7 through Update 11 OpenJDK versions 6 and 7 Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact...

CVE-2013-0420

Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on...

PT-2013-1582

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.2.0.3 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Description The issue affects the Spatial component in Oracle Database Server, allowin...