| Max CVSS | 10.0 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-1954 | 10.0 |
Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attacker
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2012-1951 | 10.0 |
Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows rem
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2012-1953 | 9.3 |
The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a den
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2012-1952 | 9.3 |
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame varia
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2012-1955 | 6.8 |
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and hi
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2002-0640 | 10.0 |
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authenticat
|
01-07-2024 - 11:15 | 03-07-2002 - 04:00 | |
| CVE-2003-0791 | 7.5 |
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
|
25-01-2024 - 02:14 | 07-10-2003 - 04:00 | |
| CVE-2012-1757 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
|
29-08-2022 - 20:53 | 17-07-2012 - 23:55 | |
| CVE-2012-1734 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
|
29-08-2022 - 20:53 | 17-07-2012 - 22:55 | |
| CVE-2012-1756 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
|
29-08-2022 - 20:53 | 17-07-2012 - 22:55 | |
| CVE-2008-6566 | 10.0 |
Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors related to a "major security" vulnerability.
|
29-08-2022 - 19:58 | 31-03-2009 - 17:30 | |
| CVE-2012-1689 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
|
26-08-2022 - 20:32 | 17-07-2012 - 22:55 | |
| CVE-2012-0540 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
|
26-08-2022 - 20:32 | 17-07-2012 - 22:55 | |
| CVE-2012-1735 | 6.8 |
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
|
01-07-2022 - 14:05 | 17-07-2012 - 22:55 | |
| CVE-2006-3427 | 5.0 |
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.
|
13-12-2021 - 18:37 | 07-07-2006 - 00:05 | |
| CVE-2012-0492 | 2.1 |
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012
|
17-12-2019 - 20:23 | 18-01-2012 - 22:55 | |
| CVE-2012-0495 | 4.0 |
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE
|
17-12-2019 - 15:24 | 18-01-2012 - 22:55 | |
| CVE-2012-0493 | 2.1 |
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE
|
17-12-2019 - 15:24 | 18-01-2012 - 22:55 | |
| CVE-2009-0075 | 9.3 |
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document o
|
27-02-2019 - 14:07 | 10-02-2009 - 22:30 | |
| CVE-2003-1059 | 7.2 |
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.
|
30-10-2018 - 16:26 | 20-11-2003 - 05:00 | |
| CVE-2006-0586 | 7.5 |
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT packag
|
19-10-2018 - 15:45 | 08-02-2006 - 01:02 | |
| CVE-2006-1223 | 4.3 |
Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.
|
18-10-2018 - 16:31 | 14-03-2006 - 11:02 | |
| CVE-2006-4059 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_ge
|
17-10-2018 - 21:33 | 10-08-2006 - 00:04 | |
| CVE-2007-1146 | 7.5 |
PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.
|
16-10-2018 - 16:36 | 02-03-2007 - 21:18 | |
| CVE-2007-0364 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_det
|
16-10-2018 - 16:32 | 19-01-2007 - 19:28 | |
| CVE-2007-4818 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php i
|
15-10-2018 - 21:38 | 11-09-2007 - 19:17 | |
| CVE-2007-4815 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) view
|
15-10-2018 - 21:38 | 11-09-2007 - 19:17 | |
| CVE-2007-4814 | 7.5 |
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argu
|
15-10-2018 - 21:38 | 11-09-2007 - 19:17 | |
| CVE-2007-4863 | 6.8 |
SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.
|
15-10-2018 - 21:38 | 30-10-2007 - 21:46 | |
| CVE-2012-3110 | 2.1 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability
|
12-10-2018 - 22:03 | 17-07-2012 - 23:55 | |
| CVE-2012-3108 | 2.1 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability
|
12-10-2018 - 22:03 | 17-07-2012 - 23:55 | |
| CVE-2012-3107 | 2.1 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability
|
12-10-2018 - 22:03 | 17-07-2012 - 23:55 | |
| CVE-2012-3109 | 2.1 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-
|
12-10-2018 - 22:03 | 17-07-2012 - 23:55 | |
| CVE-2012-3117 | 4.0 |
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to HTTP.
|
22-12-2017 - 02:29 | 17-07-2012 - 23:55 | |
| CVE-2012-3123 | 5.0 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.
|
22-12-2017 - 02:29 | 17-07-2012 - 23:55 | |
| CVE-2012-3116 | 1.9 |
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows local users to affect confidentiality via unknown vectors.
|
22-12-2017 - 02:29 | 17-07-2012 - 23:55 | |
| CVE-2012-3118 | 4.0 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect confidentiality, related to PANPROC.
|
22-12-2017 - 02:29 | 17-07-2012 - 23:55 | |
| CVE-2012-3119 | 4.0 |
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway.
|
22-12-2017 - 02:29 | 17-07-2012 - 23:55 | |
| CVE-2009-1049 | 7.5 |
SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:34 | 24-03-2009 - 14:30 | |
| CVE-2008-6471 | 7.5 |
SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.
|
29-09-2017 - 01:33 | 13-03-2009 - 10:30 | |
| CVE-2008-6940 | 7.5 |
TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.
|
29-09-2017 - 01:33 | 12-08-2009 - 10:30 | |
| CVE-2014-8653 | 4.3 |
Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.
|
08-09-2017 - 01:29 | 06-11-2014 - 15:55 | |
| CVE-2012-3128 | 3.7 |
Unspecified vulnerability in Oracle SPARC T-Series Servers running System Firmware 8.2.0 and 8.1.4.e or earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Integrated Lights Out Manager.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3127 | 5.4 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3121 | 5.0 |
Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availability via unknown vectors related to in.tnamed and NameServer.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3114 | 4.3 |
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote attackers to affect integrity via unknown vectors.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3112 | 4.3 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Solaris Management Console.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3126 | 6.2 |
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Apache Tomcat Agent.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3120 | 7.8 |
Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3115 | 4.3 |
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1, 11.1.1.5, and 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Install.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3122 | 2.6 |
Unspecified vulnerability in Oracle Sun Solaris 8 and 9 allows local users to affect confidentiality and integrity via unknown vectors related to sort.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3129 | 5.1 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3124 | 5.0 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3113 | 5.5 |
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0.20 allows remote authenticated users to affect confidentiality and integrity, related to EPERF.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3111 | 3.5 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to TECH, a different vulnerability than CVE-2012-1762.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3130 | 4.3 |
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to pkg.depotd.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3125 | 7.1 |
Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows remote attackers to affect availability, related to TCP/IP.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-3131 | 4.3 |
Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows remote attackers to affect confidentiality, related to Network/NFS.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1760 | 4.3 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1742.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1731 | 6.8 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1758 | 4.0 |
Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1759.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1742 | 5.0 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1760.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1728 | 5.8 |
Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1762 | 3.5 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to TECH, a different vulnerability than CVE-2012-3111.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1732 | 4.0 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1754.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1715 | 4.3 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1754 | 4.0 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1732.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1752 | 4.9 |
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Kernel/NFS.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1765 | 4.7 |
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1727 | 3.5 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Documen
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1748 | 4.0 |
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1759 | 4.0 |
Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1758.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1753 | 5.4 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to PC
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1750 | 4.4 |
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to mailx.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1739 | 3.5 |
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1687 | 5.6 |
Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability, related to Logical Domains (LDOM).
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1761 | 4.3 |
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to UI Framework.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1741 | 5.8 |
Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1736 | 5.0 |
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1729 | 4.3 |
Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1737 | 6.8 |
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 1
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1738 | 5.0 |
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1730 | 4.3 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1764 | 3.5 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to MCF.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2012-1749 | 5.0 |
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1743 | 2.8 |
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-1733 | 3.5 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2012-2099 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) search field, or the (2) Author or (3) select_sort parameters in an advanced search.
|
29-08-2017 - 01:31 | 24-01-2013 - 01:55 | |
| CVE-2011-3562 | 4.3 |
Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.
|
29-08-2017 - 01:30 | 17-07-2012 - 22:55 | |
| CVE-2012-0078 | 4.0 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).
|
29-08-2017 - 01:30 | 18-01-2012 - 22:55 | |
| CVE-2012-0088 | 4.0 |
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration.
|
29-08-2017 - 01:30 | 18-01-2012 - 22:55 | |
| CVE-2012-0563 | 2.1 |
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kerberos/klist.
|
29-08-2017 - 01:30 | 17-07-2012 - 22:55 | |
| CVE-2012-0076 | 4.0 |
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.
|
29-08-2017 - 01:30 | 18-01-2012 - 22:55 | |
| CVE-2010-4976 | 4.3 |
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka Search Box field). NOTE: some of these details are obtained from third part
|
29-08-2017 - 01:29 | 01-11-2011 - 22:55 | |
| CVE-2009-2192 | 7.5 |
MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."
|
17-08-2017 - 01:30 | 06-08-2009 - 16:30 | |
| CVE-2007-5949 | 3.5 |
Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action.
|
29-07-2017 - 01:33 | 14-11-2007 - 01:46 | |
| CVE-2007-3625 | 5.0 |
The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service (agent exit) via a certain request that uses content redirection and a long pathname.
|
29-07-2017 - 01:32 | 09-07-2007 - 16:30 | |
| CVE-2007-0247 | 5.0 |
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.
|
29-07-2017 - 01:30 | 16-01-2007 - 18:28 | |
| CVE-2005-4683 | 2.1 |
PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by (1) migrate_all_online.sh, (
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-2412 | 5.0 |
PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP code via the Include parameter.
|
11-07-2017 - 01:32 | 03-08-2005 - 04:00 | |
| CVE-2004-2457 | 5.0 |
Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2003-1208 | 10.0 |
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FR
|
11-07-2017 - 01:29 | 03-12-2004 - 05:00 | |
| CVE-2005-2461 | 6.4 |
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
|
18-10-2016 - 03:27 | 31-12-2005 - 05:00 | |
| CVE-2005-2462 | 2.1 |
Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges.
|
18-10-2016 - 03:27 | 31-12-2005 - 05:00 | |
| CVE-2005-2463 | 6.4 |
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message.
|
18-10-2016 - 03:27 | 31-12-2005 - 05:00 | |
| CVE-2005-2460 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.
|
18-10-2016 - 03:27 | 31-12-2005 - 05:00 | |
| CVE-2014-4716 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.
|
07-07-2014 - 13:57 | 03-07-2014 - 14:55 | |
| CVE-2012-3134 | 4.0 |
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect availability via unknown vectors.
|
11-10-2013 - 03:44 | 17-07-2012 - 23:55 | |
| CVE-2012-1740 | 7.8 |
Unspecified vulnerability in the Oracle Application Express Listener component in Oracle Application Express Listener 1.1-ea, 1.1.1, 1.1.2, and 1.1.3 allows remote attackers to affect confidentiality via unknown vectors.
|
11-10-2013 - 03:42 | 17-07-2012 - 22:55 | |
| CVE-2012-1746 | 5.0 |
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a differen
|
11-10-2013 - 03:42 | 17-07-2012 - 22:55 | |
| CVE-2012-1745 | 5.0 |
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect availability via unknown vectors.
|
11-10-2013 - 03:42 | 17-07-2012 - 22:55 | |
| CVE-2012-1747 | 5.0 |
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a differen
|
11-10-2013 - 03:42 | 17-07-2012 - 22:55 | |
| CVE-2013-1898 | 7.5 |
lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
|
10-04-2013 - 04:00 | 09-04-2013 - 20:55 | |
| CVE-2007-4614 | 7.5 |
BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2
|
13-11-2008 - 06:46 | 31-08-2007 - 00:17 |