CVE-2012-0396

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search...

Unrestricted file upload

Unrestricted file upload vulnerability in ftpuploadfile.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory...

Information disclosure

moveuploadedfile.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message...

Cross site scripting

The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...

CVE-2012-0490

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors...

CVE-2012-0117

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495...

CVE-2012-0119

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492...

CVE-2012-0120

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492...

CVE-2012-0082

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2012-0087

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102...

Design/Logic Flaw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492...

Design/Logic Flaw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113...

CVE-2011-3568

CVE-2011-3568 affects Oracle Fusion Middleware’s Oracle Web Services Manager component (versions 11.1.1.3, 11.1.1.4, 11.1.1.5). The vulnerability is described as unspecified and involves remote authenticated users impacting confidentiality and integrity via unknown vectors related to Web Services...

CVE-2012-0102

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101...

CVE-2012-0484

CVE-2012-0484 describes an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.0.x, 5.1.x, and 5.5.x that allows remote authenticated users to affect confidentiality via unknown vectors. The available connected documents confirm this CVE is tied to MySQL server components an...

CVE-2012-0486

CVE-2012-0486 affects Oracle MySQL 5.5.x (MySQL Server). The vulnerability allows remote authenticated users to affect availability via unknown vectors (unified with CVE-2012-0486 and other CVEs in the same 2012-01-15 timeframe). Connected OpenVAS data corroborates CVE-2012-0486 among a set of My...

CVE-2011-3514

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...

CVE-2012-0102

CVE-2012-0102 is listed in MiracleLinux advisories AXSA:2012-195:01 and AXSA:2012-209:01 as an unspecified MySQL Server vulnerability affecting Oracle MySQL 5.0.x/5.1.x, enabling remote authenticated users to affect availability via unknown vectors. The connected Nessus entries enumerate CVE-2012...

CVE-2012-0116

CVE-2012-0116 refers to an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.1.x and 5.5.x, where remote authenticated users could affect confidentiality and integrity via unknown vectors. The linked documents confirm affected product families and a remote-authenticated ac...