CVE-2014-0391

CVE-2014-0391 pertains to an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1, related to End User Self Service and allowing remote attackers to affect confidentiality via unknown vectors. The connec...

CVE-2013-5869

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Page Service...

CVE-2013-5879

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance...

CVE-2013-5879

CVE-2013-5879 concerns an unspecified vulnerability in the Oracle Outside In Technology Outside In Maintenance component within Oracle Fusion Middleware 8.4.0/8.4.1. The vulnerability could allow a denial of service or, potentially, remote code execution on server installations. The reported CVSS...

CVE-2013-5869

Oracle WebCenter Portal (Oracle Fusion Middleware) versions 11.1.1.6.0–11.1.1.8.0 are affected by an unspecified information-disclosure vulnerability in the Page Service subcomponent that could allow remote attackers to access confidential data. The exact vectors and root cause are not detailed i...

CVE-2013-5808

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

CVE-2013-5785

CVE-2013-5785 affects Oracle Fusion Middleware’s Oracle Reports Developer component (versions 11.1.1.6, 11.1.1.7, 11.1.2.1). The entry notes an unspecified vulnerability allowing remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to Security and Au...

CVE-2013-5808

CVE-2013-5808 affects Oracle iPlanet Web Proxy Server 4.0 prior to 4.0.23 (Sun Java System Web Proxy Server). The vulnerability is described as unspecified and related to Administration . The Nessus/NVD records indicate a remote, network-exposed issue with low base score (CVSS v2: 2.6, Confidenti...

Oracle Releases January 2014 Security Advisory

Oracle has released its Critical Patch Update for January 2014 to address 144 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 22 for Oracle Fusion Middleware 2 for Oracle Hyperion 4 for Oracle E-Business Suite 16 for Oracle...

Oracle Fusion Middleware Web Services Component Remote Information Disclosure

The remote host is affected by an information disclosure vulnerability that is related to the 'ScriptServlet' class in the Web Services Test Page. This vulnerability can be triggered via a specially crafted query with a directory traversal string. C Tenable Network Security, Inc...

Oracle Fusion Middleware Oracle Outside In Technology未明代码执行漏洞

CVE ID:CVE-2013-5763 Oracle Fusion Middleware是一款Oracle公司开发的融合中间件。 Oracle Fusion Middleware中的Oracle Outside In Technology组件存在未明安全漏洞，允许远程攻击者利用漏洞以应用程序上下文执行任意代码，漏洞相关Outside In Maintenance。 该漏洞原来错误的映射到CVE-2013-3624中。 0 Oracle Fusion Middleware 8.4.0 厂商补丁： Oracle ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-5763

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to...

CVE-2013-5763

CVE-2013-5763 corresponds to a stack-based buffer overflow in the Oracle Outside In Technology OS/2 Metafile Parser. The vulnerability can be triggered by processing a crafted file, potentially allowing a remote attacker to execute arbitrary code with the privileges of the vulnerable application....

CVE-2013-5763

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to...

NEW VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0014 Synopsis: VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation Issue date: 2013-12-03 Updat...

VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation

VMware Workstation, Fusion, ESXi and ESX patches address a vulnerability in the LGTOSYNC.SYS driver which could result in a privilege escalation on older Windows-based Guest Operating Systems. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0014.nasl 6074 2017-05-05 09:03:14Z teissa $ VMSA-2013-0014...

VMware Fusion 5.x < 5.0.4 LGTOSYNC.SYS Privilege Escalation (VMSA-2013-0014)

The version of VMware Fusion 5.x installed on the remote Mac OS X host is prior to 5.0.4. It is, therefore, reportedly affected by a privilege escalation vulnerability in the LGTOSYNC.SYS driver on 32-bit Guest Operating Systems running Windows XP. Note that by exploiting this issue, a local...

CVE-2013-3519

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs ...

CVE-2013-3519

CVE-2013-3519 concerns a privilege-escalation flaw in VMware’s LGTOSYNC.SYS driver. A crafted memory allocation could allow a guest OS user to gain guest-OS privileges on 32-bit Windows guests. Affected products/versions (per VMSA-2013-0014 and associated advisories): VMware Workstation 9.x befor...