Latest CVE Feed
-
4.0
MEDIUMCVE-2014-6464
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.... Read more
- EPSS Score: %1.00
- Published: Oct. 15, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2012-0540
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.... Read more
- EPSS Score: %0.56
- Published: Jul. 17, 2012
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-3641
The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.... Read more
Affected Products : cinder- EPSS Score: %0.33
- Published: Oct. 08, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2015-4898
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.... Read more
Affected Products : e-business_suite- EPSS Score: %0.15
- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2015-2684
Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.... Read more
- EPSS Score: %0.46
- Published: Mar. 31, 2015
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2013-4475
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an ... Read more
- EPSS Score: %6.76
- Published: Nov. 13, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3804
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.... Read more
- EPSS Score: %0.65
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2009-1017
Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.... Read more
Affected Products : application_server- EPSS Score: %2.57
- Published: Apr. 15, 2009
- Modified: Apr. 09, 2025
-
4.0
MEDIUMCVE-2013-3808
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.... Read more
- EPSS Score: %0.67
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2010-3869
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.... Read more
- EPSS Score: %0.20
- Published: Nov. 17, 2010
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.... Read more
Affected Products : web_gateway- EPSS Score: %0.18
- Published: Sep. 02, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2012-4401
Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended capability restrictions and perform certain topic changes by leveraging course-editing capabilities.... Read more
Affected Products : moodle- EPSS Score: %0.21
- Published: Sep. 19, 2012
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-2761
The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZilla FTP client.... Read more
Affected Products : modicon_m340- EPSS Score: %0.54
- Published: Apr. 04, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2011-3346
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOT... Read more
- EPSS Score: %0.12
- Published: Apr. 01, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2012-2168
IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.... Read more
Affected Products : rational_clearquest- EPSS Score: %0.18
- Published: Aug. 17, 2012
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-6563
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294... Read more
Affected Products : database_server- EPSS Score: %0.15
- Published: Oct. 15, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2024-56138
notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the timestamp signature generation, the revoca... Read more
Affected Products : notation-go- Published: Jan. 13, 2025
- Modified: Jan. 13, 2025
- Vuln Type: Cryptography
-
4.0
MEDIUMCVE-2012-3180
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.... Read more
- EPSS Score: %0.61
- Published: Oct. 17, 2012
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2015-1907
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors.... Read more
Affected Products : rational_license_key_server- EPSS Score: %0.18
- Published: May. 08, 2015
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2018-3082
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols... Read more
Affected Products : mysql oncommand_insight oncommand_workflow_automation snapcenter storage_automation_store mysql_server- EPSS Score: %0.41
- Published: Jul. 18, 2018
- Modified: Nov. 21, 2024