Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-01-18 CVE-2011-2262 Remote MySQL Server vulnerability in Oracle MySQL
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.
network
low complexity
mysql oracle
5.0
2011-12-30 CVE-2011-5035 Improper Input Validation vulnerability in Oracle Glassfish Server
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.
network
low complexity
oracle CWE-20
5.0
2011-12-30 CVE-2011-4461 Cryptographic Issues vulnerability in multiple products
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
network
low complexity
oracle mortbay CWE-310
5.0
2011-10-19 CVE-2011-3557 Remote Java Runtime Environment vulnerability in Oracle Java SE
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.
network
sun oracle
6.8
2011-10-19 CVE-2011-3547 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
network
low complexity
sun oracle
5.0
2011-10-19 CVE-2011-3546 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
network
oracle sun
5.8
2011-10-18 CVE-2011-2323 Unspecified vulnerability in Oracle Industry Applications 4.6.1/4.6.2
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help.
network
oracle
4.3
2011-10-18 CVE-2011-3538 Remote Security vulnerability in Oracle Virtualization 4.0
Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication.
network
oracle
6.8
2011-10-18 CVE-2011-3535 Remote vulnerability in Oracle Sun Solaris
Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota Server (rquotad).
network
low complexity
oracle
5.0
2011-10-18 CVE-2011-3534 Remote vulnerability in Oracle Sun Solaris
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network Status Monitor (statd).
network
low complexity
oracle
5.0