CVE-2014-4222

CVE-2014-4222 affects Oracle Fusion Middleware’s Oracle HTTP Server (11.1.1.7.0 and 12.1.2.0). The vulnerability is in the Oracle WebLogic plugins (plugin 1.1) and allows remote authenticated users to affect confidentiality via vectors related to plugin 1.1. Exploitation details are not provided ...

CVE-2014-4217

CVE-2014-4217 affects Oracle WebLogic Server components under Oracle Fusion Middleware (10.0.2.0, 10.3.6.0, 12.1.1.0). The vulnerability is described as unspecified and related to WLS Web Services, enabling remote integrity impact. No explicit remediation details are provided in the supplied docu...

CVE-2014-2480

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481...

CVE-2014-4201

CVE-2014-4201 is an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware (versions 10.3.6.0, 12.1.1.0, 12.1.2.0) that can remotely affect availability via WLS - Web Services. The connected sources confirm the issue but do not provide concrete exploit details ...

CVE-2014-4211

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

CVE-2014-4212

Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Process Mgmt and Notification...

CVE-2014-4222

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0 and 12.1.2.0 allows remote authenticated users to affect confidentiality via vectors related to plugin 1.1...

CVE-2014-4202

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services...

CVE-2014-4211

CVE-2014-4211 : Unspecified vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware 11.1.1.7–11.1.1.8 could allow remote attackers to affect integrity via unknown vectors related to Portlet Services. No concrete exploit details, affected versions beyond those listed, or...

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

CVE-2014-2481

Technical details for CVE-2014-2481 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-4212

CVE-2014-4212 affects Oracle Fusion Middleware 11.1.1.7. The vulnerability is in the Fusion Middleware component relating to Process Management and Notification, allowing remote attackers to affect confidentiality via unknown vectors. The connected documents confirm the CVE’s inclusion in Oracle’...

CVE-2014-2479

CVE-2014-2479 is an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting WLS - Web Services. Affected versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The IBM bulletin describes a vulnerability in Oracle WebLogic Server related to the Web Services c...

CVE-2014-2493

Technical details for CVE-2014-2493 are not publicly available in the provided connected documents beyond the shared description. Monitor for updates from official advisories and vulnerability databases.

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

VMware Fusion < 5.0.5 / 6.0.4 OpenSSL Library Multiple Vulnerabilities

The version of VMware Fusion installed on the remote Mac OS X is version 5.x prior to 5.0.5 or 6.x prior to 6.0.4. It is, therefore, affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other...

Oracle Event Processing FileUploadServlet Arbitrary File Upload Exploit

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system. This Metasploit module exploits an Arbitrary File Upload vulnerability in Oracle Event Processing...

Nokia Multimedia Player 1.0 SEH Unicode Exploit

No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...

PHP-Fusion Mod Kroax <= 4.42 (category) SQL Injection Vulnerability

No description provided by source. ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws --- Remote SQL...

PHP-Fusion <= 6.00.306 Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n; echo local inclusion vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc6 echo Usage: p...