CVE-2015-2599

CVE-2015-2599 affects Oracle Database Server (RDBMS Scheduler component). Affected versions include 11.1.0.7, 11.2.0.3/11.2.0.4, 12.1.0.1/12.1.0.2. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors. NVD notes a Network attack vector with Low complex...

CVE-2015-2586

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors...

CVE-2015-2595

CVE-2015-2595 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 where the Oracle OLAP component contains an unspecified vulnerability that can be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The connected OpenVAS entry and ...

CVE-2015-2629

CVE-2015-2629 affects Oracle Database Server’s Java VM component. The SUSE security update notes that the vulnerability allows authenticated network attackers to compromise confidentiality, integrity, and availability via multiple protocols, potentially leading to arbitrary code execution and ope...

CVE-2015-2629

Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0457...

CVE-2015-2585

CVE-2015-2585: Oracle Database Server’s Application Express component (before version 5.0) is affected. The vulnerability allows remote authenticated users to impact availability via unknown vectors; CVSSv2 base score 2.1 (Low) with network access and high authentication complexity. Connected sou...

CVE-2015-2655

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2015-2655: a cross-site scripting vulnerability affecting all versions prior to 4.2.3.00.08. It can impact confidentiality and integrity via remote access authenticated users. The fixed version is 4.2.3.00.08. Mitigati...

CVE-2015-4740

Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2015-2585

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors...

CVE-2015-4755

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2015-4755

CVE-2015-4755 is a disclosed vulnerability in the Oracle Database Server RDBMS Security component (Oracle Database Server 12.1.0.2). OpenVAS lists this CVE as part of the July 2015 CPU suite and notes affected products include Oracle Database Server and specific versions such as 12.1.0.2. The vul...

CVE-2015-2586

Affected software: Oracle Database Server (Application Express component). Vulnerability summary (from sources): Unspecified vulnerability in the Application Express component allows remote attackers to affect availability via unknown vectors. Affected versions include Oracle Database Server prio...

CVE-2015-0468

CVE-2015-0468 affects Oracle Database Server’s Core RDBMS component (versions 11.1.0.7, 11.2.0.3, 12.1.0.1). The vulnerability allows remote, authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Public references describe an unspecified vulnerability in ...

CVE-2015-0468

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2015-2655

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2015-2599

Unspecified vulnerability in the RDBMS Scheduler component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mariadb-5.5.43-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[SECURITY] Fedora 20 Update: sqlite-3.8.9-1.fc20

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

[SECURITY] [DSA 3229-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3229-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 19, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3229-1 (mysql-5.5 - security update)

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.43. Please see the MySQL 5.5 Release Notes and Oracle OpenVAS Vulnerability Test $Id: deb3229.nasl 6609 2017-07-07 12:05:59Z cfischer $...