Latest CVE Feed
-
4.0
MEDIUMCVE-2013-5769
Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 allows remote authenticated users to affect availability via unknown vectors related to Web Services.... Read more
Affected Products : siebel_crm- EPSS Score: %0.44
- Published: Oct. 16, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-5779
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect confidentiality via vectors related to PIA Core Technology.... Read more
- EPSS Score: %0.17
- Published: Oct. 16, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2012-3180
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.... Read more
- EPSS Score: %0.61
- Published: Oct. 17, 2012
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-6319
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to bypass intended access restrictions... Read more
Affected Products : algo_one- EPSS Score: %0.12
- Published: Mar. 05, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2013-5756
Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to cgi-bin/cgiServer.exx.... Read more
Affected Products : sip-t38g- EPSS Score: %5.11
- Published: Aug. 03, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2013-5676
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.... Read more
- EPSS Score: %5.31
- Published: Dec. 13, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-6422
The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof... Read more
- EPSS Score: %0.34
- Published: Dec. 23, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-6404
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/se... Read more
Affected Products : quassel_irc- EPSS Score: %0.45
- Published: Dec. 09, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3816
Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determination... Read more
Affected Products : industry_applications- EPSS Score: %0.26
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3795
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.... Read more
Affected Products : mysql- EPSS Score: %0.72
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3823
Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.... Read more
Affected Products : supply_chain_products_suite- EPSS Score: %0.26
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-0412
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.... Read more
- EPSS Score: %0.49
- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3838
Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5 allows local users to affect a... Read more
Affected Products : sparc_t3-1 sparc_t3-1b sparc_t3-3 sparc_t3-4 sparc_t3-2 sparc_enterprise_m8000_server sparc_enterprise_m9000_server sun_system_firmware sparc_t4-1 sparc_t4-1b +2 more products- EPSS Score: %0.08
- Published: Oct. 16, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-7330
Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.... Read more
Affected Products : jenkins- EPSS Score: %0.07
- Published: Oct. 17, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2013-3825
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment.... Read more
Affected Products : supply_chain_products_suite- EPSS Score: %0.38
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2013-3796
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.... Read more
Affected Products : mysql- EPSS Score: %0.72
- Published: Jul. 17, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-0478
APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature.... Read more
- EPSS Score: %0.23
- Published: Jun. 17, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2014-0453
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.... Read more
- EPSS Score: %1.69
- Published: Apr. 16, 2014
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2013-3596
AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter.... Read more
Affected Products : advanceware- EPSS Score: %0.21
- Published: Sep. 08, 2013
- Modified: Apr. 11, 2025
-
4.0
MEDIUMCVE-2014-0440
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect availability via vectors related to PIA Core Technology.... Read more
Affected Products : peoplesoft_products- EPSS Score: %0.92
- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025