deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-4141
Published: 2014-10-15
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/60968; http://www.securityfocus.com/bid/70342; http://www.securitytracker.com/id/1031018
CVE: CVE-2014-4148
Published: 2014-10-15
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx; http://secunia.com/advisories/60970; http://www.securityfocus.com/bid/70429
CVE: CVE-2014-6942
Published: 2014-10-15
Description: The Alisha Marie (Unofficial) (aka com.automon.ay.alisha.marie) application 1.4.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/582497; http://www.kb.cert.org/vuls/id/910649; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6943
Published: 2014-10-15
Description: The Konigsleiten (aka com.knigsleiten) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/383441; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6944
Published: 2014-10-15
Description: The mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/582497; http://www.kb.cert.org/vuls/id/869817; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6945
Published: 2014-10-15
Description: The Neeku Naaku Dash Dash (aka com.dakshaa.nndd) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/185793; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6946
Published: 2014-10-15
Description: The Re:kyu (aka com.appzone619) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/283561; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6947
Published: 2014-10-15
Description: The Archie Comics (aka com.iversecomics.archie.android) application 1.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/133961; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6948
Published: 2014-10-15
Description: The TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/286289; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6949
Published: 2014-10-15
Description: The Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/173121; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6950
Published: 2014-10-15
Description: The Mt. Airy News (aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148) application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/481825; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6951
Published: 2014-10-15
Description: The OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/321753; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-6952
Published: 2014-10-15
Description: The Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/209465; http://www.kb.cert.org/vuls/id/582497; https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE: CVE-2014-1829
Published: 2014-10-15
Description: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://advisories.mageia.org/MGASA-2014-0409.html; http://www.debian.org/security/2015/dsa-3146; http://www.mandriva.com/security/advisories?name=MDVSA-2015:133
CVE: CVE-2014-1830
Published: 2014-10-15
Description: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://advisories.mageia.org/MGASA-2014-0409.html; http://lists.opensuse.org/opensuse-updates/2016-01/msg00095.html; http://www.debian.org/security/2015/dsa-3146
CVE: CVE-2014-2022
Published: 2014-10-15
Description: SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128696/vBulletin-4.x-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Oct/56; http://www.securityfocus.com/bid/70417
CVE: CVE-2014-2576
Published: 2014-10-15
Description: plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2014-10/msg00015.html; http://seclists.org/oss-sec/2014/q1/636; http://secunia.com/advisories/60422
CVE: CVE-2014-2927
Published: 2014-10-15
Description: The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/34465; http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf; https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15236.html
CVE: CVE-2014-3593
Published: 2014-10-15
Description: Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2014-1390.html; https://bugzilla.redhat.com/show_bug.cgi?id=989005; http://rhn.redhat.com/errata/RHSA-2014-1390.html
CVE: CVE-2014-3664
Published: 2014-10-15
Description: Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: https://access.redhat.com/errata/RHSA-2016:0070; https://bugzilla.redhat.com/show_bug.cgi?id=1147765; https://exchange.xforce.ibmcloud.com/vulnerabilities/96973
CVE: CVE-2014-3681
Published: 2014-10-15
Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/errata/RHSA-2016:0070; https://bugzilla.redhat.com/show_bug.cgi?id=1147766; https://exchange.xforce.ibmcloud.com/vulnerabilities/96975
CVE: CVE-2014-6312
Published: 2014-10-15
Description: Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the custom_style_afo parameter on the login_widget_afo page to wp-admin/options-general.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/show/osvdb/111700; http://osvdb.org/show/osvdb/111757; http://seclists.org/fulldisclosure/2014/Sep/58
CVE: CVE-2014-7206
Published: 2014-10-15
Description: The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: http://secunia.com/advisories/61158; http://secunia.com/advisories/61333; http://secunia.com/advisories/61768
CVE: CVE-2014-8293
Published: 2014-10-15
Description: Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMG_signin_topic parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html; http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html
CVE: CVE-2014-8294
Published: 2014-10-15
Description: Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html; http://packetstormsecurity.com/files/128479/AllMyGuests-0.4.1-XSS-SQL-Injection-Insecure-Cookie-Handling.html
CVE: CVE-2014-8295
Published: 2014-10-15
Description: SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/show/osvdb/112418; http://packetstormsecurity.com/files/128480/Bacula-web-5.2.10-SQL-Injection.html; http://www.exploit-db.com/exploits/34851
CVE: CVE-2014-8750
Published: 2014-10-15
Description: Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be allocated to two different instances.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-362
References: http://lists.openstack.org/pipermail/openstack-announce/2014-October/000293.html; http://rhn.redhat.com/errata/RHSA-2014-1689.html; http://rhn.redhat.com/errata/RHSA-2014-1781.html
CVE: CVE-2014-2472
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a different vulnerability than CVE-2014-2474, CVE-2014-2476, and CVE-2014-6459.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1031034; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-2473
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv) and SGD SSL Daemon (ttassl).
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1031034; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-2474
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a different vulnerability than CVE-2014-2472, CVE-2014-2476, and CVE-2014-6459.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1031034; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-2475
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv).
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1031034; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-2476
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a different vulnerability than CVE-2014-2472, CVE-2014-2474, and CVE-2014-6459.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securitytracker.com/id/1031034; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-2478
Published: 2014-10-15
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 2.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-4274
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
CVSS Score: 4.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html; http://www.oracle.com/technetwork/topics/security/bulletinoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-4275
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70559
CVE: CVE-2014-4276
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System (CIFS).
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70561
CVE: CVE-2014-4277
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70539
CVE: CVE-2014-4278
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/61781; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70475
CVE: CVE-2014-4280
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70543
CVE: CVE-2014-4281
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Portal Integration.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/61781; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70466
CVE: CVE-2014-4282
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70520
CVE: CVE-2014-4283
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70563
CVE: CVE-2014-4284
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280.
CVSS Score: 4.4 (MEDIUM)
References: http://secunia.com/advisories/61593; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70554
CVE: CVE-2014-4285
Published: 2014-10-15
Description: Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/61725; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70471
CVE: CVE-2014-4287
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html; http://www.oracle.com/technetwork/topics/security/bulletinoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-4288
Published: 2014-10-15
Description: Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
CVE: CVE-2014-4289
Published: 2014-10-15
Description: Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2014-6544.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70541; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html
CVE: CVE-2014-4290
Published: 2014-10-15
Description: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/70501; http://www.oracle.com/technetwork/topics/security/cpuoct2[PII_REDACTED].html