Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2013-12-11 CVE-2013-6672 Information Exposure vulnerability in multiple products
Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
4.3
2013-12-11 CVE-2013-5614 Improper Restriction of Rendered UI Layers OR Frames vulnerability in multiple products
Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
4.3
2013-12-11 CVE-2013-5612 Cross-Site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.
4.3
2013-12-11 CVE-2013-5611 Security Bypass vulnerability in Mozilla Firefox
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
5.8
2013-10-16 CVE-2013-5867 Remote Security vulnerability in Oracle Siebel CRM 8.1.1/8.2.2
Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via vectors related to SISNAPI & Network Infrastructure.
network
low complexity
oracle
5.0
2013-10-16 CVE-2013-5866 Local Security vulnerability in Oracle Sunos 5.11.1
Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
local
high complexity
oracle
5.2
2013-10-16 CVE-2013-5864 Local Security vulnerability in Oracle Solaris
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to USB hub driver.
local
low complexity
oracle sun
4.9
2013-10-16 CVE-2013-5863 Remote Security vulnerability in Oracle Sunos 5.11.1
Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon.
network
oracle
4.3
2013-10-16 CVE-2013-5862 Local Security vulnerability in Oracle Solaris
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than CVE-2014-4215.
local
low complexity
oracle sun
4.9
2013-10-16 CVE-2013-5861 Remote Security vulnerability in Oracle Sunos 5.11.1
Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect availability via vectors related to Kernel/KSSL.
network
oracle
4.3