Oracle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-5893 1Oracle 2Jdk Jre Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: t...Show more Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.Show less
CVE-2013-5892 1Oracle 1Vm Virtualbox Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 3.5 LOW· v2 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availabi...Show more Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.Show less
CVE-2013-5891 5Canonical DebianMariadb+2 more 7Debian Linux Enterprise Linux DesktopEnterprise Linux Server+4 more Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.
CVE-2013-5211 3Ntp OpensuseOracle 3Linux NtpOpensuse Apr 29, 2026 Jan 2, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploi...Show more The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.Show less
CVE-2013-5763 1Oracle 1Fusion Middleware Apr 29, 2026 Dec 12, 2013 N/A· v4 N/A· v3 1.5 LOW· v2 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance....Show more Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to CVE-2013-3624.Show less
CVE-2013-6672 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
CVE-2013-5619 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array acces...Show more Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.Show less
CVE-2013-5614 7Canonical FedoraprojectMozilla+4 more 16Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+13 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended...Show more Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.Show less
CVE-2013-5612 7Canonical FedoraprojectMozilla+4 more 16Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+13 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation t...Show more Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.Show less
CVE-2013-5611 7Canonical FedoraprojectMozilla+4 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
CVE-2013-5610 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibl...Show more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.Show less
CVE-2013-6629 9Artifex CanonicalDebian+6 more 11Chrome Debian LinuxFedora+8 more Apr 29, 2026 Nov 19, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of componen...Show more The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.Show less
CVE-2013-5867 1Oracle 1Siebel Crm Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via vectors related to SISNAPI & Network Infrastructure.
CVE-2013-5866 1Oracle 1Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 5.2 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
CVE-2013-5865 1Oracle 1Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 1.7 LOW· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration.
CVE-2013-5864 2Oracle Sun 2Sunos Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to USB hub driver.
CVE-2013-5863 1Oracle 1Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon.
CVE-2013-5862 2Oracle Sun 2Sunos Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than CVE-2014-4215.
CVE-2013-5861 1Oracle 1Sunos Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect availability via vectors related to Kernel/KSSL.
CVE-2013-5859 1Oracle 1Primavera Products Suite Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Instantis EnterpriseTrack component in Oracle Primavera Products Suite 8.0.6 and 8.5 allows remote attackers to affect confidentiality via unknown vectors.

Previous 1...430431432...540 Next