Oracle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-1484 5Mozilla OpensuseOpensuse Project+2 more 7Firefox Linux Enterprise DesktopLinux Enterprise Server+4 more Apr 29, 2026 Feb 6, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
CVE-2014-1483 5Canonical MozillaOpensuse+2 more 8Firefox Linux Enterprise DesktopLinux Enterprise Server+5 more Apr 29, 2026 Feb 6, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements in...Show more Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.Show less
CVE-2014-1480 5Canonical MozillaOpensuse+2 more 8Firefox Linux Enterprise DesktopLinux Enterprise Server+5 more Apr 29, 2026 Feb 6, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and tri...Show more The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site.Show less
CVE-2014-1478 4Canonical MozillaOpensuse+1 more 5Firefox OpensuseSeamonkey+2 more Apr 29, 2026 Feb 6, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibl...Show more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors.Show less
CVE-2014-0001 3Mariadb OracleRedhat 6Enterprise Linux Enterprise Linux DesktopEnterprise Linux Server+3 more Apr 29, 2026 Jan 31, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
CVE-2013-5890 1Oracle 1E Business Suite Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unk...Show more Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Exception Reporting.Show less
CVE-2013-5889 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-...Show more Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.Show less
CVE-2013-5888 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2013-5887 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.
CVE-2013-5886 1Oracle 1Peoplesoft Products Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Common Application Objects.
CVE-2013-5885 1Oracle 1Sunos Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 1.7 LOW· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit.
CVE-2013-5884 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is...Show more Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.Show less
CVE-2013-5882 1Oracle 1Mysql Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures.
CVE-2013-5881 1Oracle 1Mysql Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CV...Show more Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.Show less
CVE-2013-5880 1Oracle 1Supply Chain Products Suite Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related...Show more Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.Show less
CVE-2013-5879 1Oracle 1Fusion Middleware Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Main...Show more Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance.Show less
CVE-2013-5878 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOT...Show more Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.Show less
CVE-2013-5877 1Oracle 2Supply Chain Products Suite Supply Chain Products Suite Sql Server Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality vi...Show more Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.Show less
CVE-2013-5876 2Oracle Sun 2Sunos Sunos Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-0447.
CVE-2013-5875 1Oracle 1Sunos Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 2.7 LOW· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity and availability via vectors related to Role Based Access Control (RBAC).

Previous 1...424425426...540 Next