15018 matches found
CVE-2013-5764: Undefined Security Weakness
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors...
CVE-2014-0665: Undefined Security Weakness
The RBAC implementation in Cisco Identity Services Engine ISE Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, ak...
CVE-2014-0437: Undefined Security Weakness
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer...
CVE-2013-5891
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition...
CVE-2014-0412
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB...
CVE-2013-5881: Undefined Security Weakness
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431...
CVE-2014-0425: Undefined Security Weakness
Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...
PT-2014-1199 · Oracle +5 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.1.72 and earlier MySQL Server versions 5.5.34 and earlier MySQL Server versions 5.6.14 and earlier Description: The issue affects the availability of data in the MySQL Server component of Oracle MySQL, specifically...
CVE-2013-7108
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...
CVE-2013-7108
CVE-2013-7108 affects Nagios Core 3.5.1, 4.0.2 and older, and Icinga up to certain releases. It is an off-by-one/heap-over-read flaw in process_cgivars() triggered by a long parameter value, allowing remote authenticated users to read process memory or cause a DoS. Affected products include Nagio...
CVE-2013-7205
Nagios Core is affected by CVE-2013-7205 due to an off-by-one error in process_cgivars() (contrib/daemonchk.c). The flaw can cause a heap-based buffer over-read, enabling remote authenticated users to read process memory or trigger a denial of service. Public references in multiple advisories (De...
CVE-2013-7205
Off-by-one error in the processcgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in the variable list,...
CVE-2013-7108: Improper Input Validation
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...
Authentication flaw
VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...
CVE-2013-7292: Improper Authentication
VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...
CVE-2013-2050
SQL injection vulnerability in the miqpolicy controller in Red Hat CloudForms 2.0 Management Engine CFME 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile parameter in an explorer action...
CVE-2013-2050: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the miqpolicy controller in Red Hat CloudForms 2.0 Management Engine CFME 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile parameter in an explorer action...
CVE-2014-0664
The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...