Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

583 results · Feed

  • Unscored —

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, …

  • Unscored —

    Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control E…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —

    Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

  • Unscored —

    Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

  • Unscored —

    Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earl…

  • Unscored —

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.12 and earlier allows remote authenticated …

  • Unscored —

    Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local user…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Ja…

  • Unscored —

    Unspecified vulnerability in the Techstack component in Oracle E-Business Suite 12.1 allows remote attackers to affect …

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated …

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and e…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 a…

  • Unscored —

    Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 al…

  • Unscored —

    Unspecified vulnerability in the XML Parser component in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRo…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…

  • Unscored —

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, …

  • Unscored —

    HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to ob…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbi…

  • Unscored —

    HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" a…

  • Unscored —

    HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified …

  • Unscored —

    The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allo…

  • Unscored —
    CVE-2013-5030 Public exploit

    Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and su…

  • Unscored —

    The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload fi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, …

  • Unscored —

    HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to byp…

  • Unscored —

    The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users …

  • Unscored —

    The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff a…

  • Unscored —

    The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers…

  • Unscored —

    The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of …

  • Unscored —

    The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows re…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, …

  • Unscored —

    Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command …

  • Unscored —

    Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed (1) r and (2) w comm…