4494 matches found
CVE-2015-4850
CVE-2015-4850 concerns Oracle PeopleSoft Products 9.2, specifically the PeopleSoft Enterprise HCM component. The vulnerability is described as unspecified with impact to confidentiality and integrity, exploitable by remote authenticated users via unknown vectors in Talent Acquisition Management. ...
CVE-2015-4828
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management Security...
Design/Logic Flaw
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management Security...
CVE-2015-4826
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types...
CVE-2015-4816
CVE-2015-4816 affects Oracle MySQL Server 5.5.44 and earlier, where an unspecified InnoDB-related vulnerability allows remote authenticated users to affect availability via unknown vectors. The MiracleLinux advisories/NESSUS plugins reference CVE-2015-4816 among a broader set of MySQL/MariaDB iss...
CVE-2015-2633
CVE-2015-2633 is described across multiple connected records as an unspecified vulnerability in the Ops Center subcomponent of Oracle Enterprise Manager Grid Control (versions 12.1.0.1 and 12.2.2). The vulnerability is exploitable by remote authenticated users and is said to affect confidentialit...
CVE-2015-4718
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; semicolon character in a file...
CVE-2015-4879
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML...
The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a intruder to execute any code they desire.
The vulnerability of the Factory Cast component of the microprogramming software for Schneider Electric’s Modicon M340 programmable logic controllers arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has passed...
UBUNTU-CVE-2015-4890
Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Replication...
UBUNTU-CVE-2015-4730
Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types...
UBUNTU-CVE-2015-4816
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...
UBUNTU-CVE-2015-4895
Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...
CVE-2015-4730
Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types...
UBUNTU-CVE-2015-4879
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML...
UBUNTU-CVE-2015-4792
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802...
CVE-2015-1806
The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors...
CVE-2015-1807
CVE-2015-1807 affects Jenkins (CloudBees Jenkins CI and Jenkins core) prior to 1.600 and LTS prior to 1.596.1. The issue is a directory traversal vulnerability: during artifact handling, Jenkins could follow a symlink, enabling a remote authenticated user with certain permissions to read arbitrar...
CVE-2015-7727
Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the 1 trace configuration page or 2 getSqlTraceConfiguration function, aka SAP...
Sql injection
Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the 1 trace configuration page or 2 getSqlTraceConfiguration function, aka SAP...