CVE-2015-0374

Disclaimer: This data contains information about vulnerable...

CVE-2015-0363

CVE-2015-0363 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core EAI component (Integration Business Services). The vulnerability is described as allowing remote authentication-based access to impact availability via unknown vectors. The connected Nessus entry references mult...

CVE-2015-0374

CVE-2015-0374 is a MySQL/MariaDB server vulnerability impacting confidentiality via unknown vectors in Foreign Key handling. Affected products and versions include Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier (and MariaDB/forked releases in corresponding lines). Public advisories...

CVE-2015-0374

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key...

CVE-2015-0385

Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Pluggable Auth...

CVE-2015-0393

CVE-2015-0393 affects Oracle E-Business Suite, specifically the Oracle Applications DBA component across versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2–12.2.4. The issue arises from DB privileges-related logic in the E-Business Suite, with a noted claim that the PUBLIC role may have INDEX privilege o...

CVE-2013-6892

CVE-2013-6892 affects WebSVN 2.3.3. Affected component is the websvn web viewer for Subversion repositories; the root cause is a symlink handling issue that allows a remote authenticated user to read arbitrary files by exploiting a symlink during commit/download. Practical impact: an attacker wit...

CVE-2015-0385

CVE-2015-0385 concerns an unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier, related to Pluggable Auth, that can affect availability. The impact is described as a partial availability loss via unknown vectors with remote authenticated access. Public sources in the connected docu...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

CVE-2015-0364

CVE-2015-0364 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - EAI component (Integration Business Services). The vulnerability is described as allowing remote authenticated users to impact availability via unknown vectors; exact root cause, exploit details, and affected ...

Design/Logic Flaw

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

CVE-2015-1028

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2730B router rev C1 with firmware GE1.01 allow remote authenticated users to inject arbitrary web script or HTML via the 1 domainname parameter to dnsProxy.cmd DNS Proxy Configuration Panel; the 2 brName parameter to lancfg2get.cgi L...

CVE-2014-6586

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor...

CVE-2014-6584

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore...

CVE-2014-6577

Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not...

CVE-2014-6568

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2730B router rev C1 with firmware GE1.01 allow remote authenticated users to inject arbitrary web script or HTML via the 1 domainname parameter to dnsProxy.cmd DNS Proxy Configuration Panel; the 2 brName parameter to lancfg2get.cgi L...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ADDDL...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal...