Vulnerabilities > Oracle

DATE CVE VULNERABILITY TITLE RISK
2015-11-05 CVE-2015-7182 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
network
low complexity
oracle mozilla CWE-119
7.5
2015-10-22 CVE-2015-4917 Remote Security vulnerability in Oracle Supply Chain products Suite 9.3.4
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4892.
network
oracle
3.5
2015-10-22 CVE-2015-4916 Unspecified vulnerability in Oracle Javafx, JDK and JRE
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
network
low complexity
oracle
5.0
2015-10-22 CVE-2015-4915 Remote Security vulnerability in Oracle and SUN Systems Product Suite 3.0/3.1/3.2
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management.
network
low complexity
oracle
critical
10.0
2015-10-22 CVE-2015-4914 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.
network
oracle
3.5
2015-10-22 CVE-2015-4913 Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858. 3.5
2015-10-22 CVE-2015-4912 Remote Security vulnerability in Oracle Fusion Middleware 11.1.2.2/11.1.2.3
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine.
network
oracle
4.3
2015-10-22 CVE-2015-4911 Unspecified vulnerability in Oracle Jdk, JRE and Jrockit
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
network
low complexity
oracle
5.0
2015-10-22 CVE-2015-4910 Remote Security vulnerability in Oracle Mysql
Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.
network
high complexity
oracle redhat
2.1
2015-10-22 CVE-2015-4909 Remote Security vulnerability in Oracle Fusion Middleware 11.1.2.4.0/12.1.2.0.0/12.1.3.0.0
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces.
network
low complexity
oracle
5.0