deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-3041
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-3042
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-3043
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-3044
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0345
Published: 2015-04-15
Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1032106; https://helpx.adobe.com/security/products/coldfusion/apsb15-07.html; http://www.securitytracker.com/id/1032106
CVE: CVE-2015-0693
Published: 2015-04-15
Description: Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38306; http://www.securitytracker.com/id/1032097; http://tools.cisco.com/security/center/viewAlert.x?alertId=38306
CVE: CVE-2015-0696
Published: 2015-04-15
Description: Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38349; http://www.securitytracker.com/id/1032137; http://tools.cisco.com/security/center/viewAlert.x?alertId=38349
CVE: CVE-2015-0697
Published: 2015-04-15
Description: Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-601
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38350; http://www.securitytracker.com/id/1032136; http://tools.cisco.com/security/center/viewAlert.x?alertId=38350
CVE: CVE-2015-0698
Published: 2015-04-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38351; http://www.securitytracker.com/id/1032135; http://tools.cisco.com/security/center/viewAlert.x?alertId=38351
CVE: CVE-2015-0699
Published: 2015-04-15
Description: SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-89
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38366; http://www.securitytracker.com/id/1032134; http://tools.cisco.com/security/center/viewAlert.x?alertId=38366
CVE: CVE-2015-0906
Published: 2015-04-15
Description: Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN02527990/414318/index.html; http://jvn.jp/en/jp/JVN02527990/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000050
CVE: CVE-2015-0907
Published: 2015-04-15
Description: Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN12329472/414318/index.html; http://jvn.jp/en/jp/JVN12329472/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000051
CVE: CVE-2015-1897
Published: 2015-04-15
Description: Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1898.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700057; http://www.securitytracker.com/id/1032102; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1092
CVE: CVE-2015-1898
Published: 2015-04-15
Description: Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1897.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700539; http://www.securityfocus.com/bid/74036; http://www.securitytracker.com/id/1032102
CVE: CVE-2013-7439
Published: 2015-04-16
Description: Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.x.org/archives/xorg-announce/2015-April/002561.html; http://seclists.org/oss-sec/2015/q2/81; http://www.debian.org/security/2015/dsa-3224
CVE: CVE-2015-1821
Published: 2015-04-16
Description: Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring the (1) NTP or (2) cmdmon access with a subnet size that is indivisible by four and an address with a nonzero bit in the subnet remainder.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html; http://www.debian.org/security/2015/dsa-3222; http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html
CVE: CVE-2015-1822
Published: 2015-04-16
Description: chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-17
References: http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html; http://www.debian.org/security/2015/dsa-3222; http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html
CVE: CVE-2015-3319
Published: 2015-04-16
Description: Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/131297/HotExBilling-Manager-73-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Apr/18; http://www.securityfocus.com/archive/1/535186/100/0/threaded
CVE: CVE-2015-0405
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032121
CVE: CVE-2015-0423
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0433
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://rhn.redhat.com/errata/RHSA-2015-1628.html; http://rhn.redhat.com/errata/RHSA-2015-1629.html
CVE: CVE-2015-0438
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032121
CVE: CVE-2015-0439
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-4756.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/74085
CVE: CVE-2015-0440
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0441
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html; http://rhn.redhat.com/errata/RHSA-2015-1628.html; http://rhn.redhat.com/errata/RHSA-2015-1629.html
CVE: CVE-2015-0447
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Configurator DMZ rules.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032129; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0448
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system.
CVSS Score: 7.2 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032132; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0449
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032131; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0450
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to WebCenter Spaces Application.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032131; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0451
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect confidentiality via vectors related to OpenSSO Web Agents.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032131; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0452
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems Products Suite 3.1 and 3.2 allows remote attackers to affect confidentiality via unknown vectors related to Ldom Manager.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/74127; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0453
Published: 2015-04-16
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via vectors related to PORTAL.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032125; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0455
Published: 2015-04-16
Description: Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032118; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0456
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Portlet Services.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032131; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0457
Published: 2015-04-16
Description: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2629.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032118; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0458
Published: 2015-04-16
Description: Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html
CVE: CVE-2015-0459
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html
CVE: CVE-2015-0460
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.3 (HIGH)
References: http://advisories.mageia.org/MGASA-2015-0158.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html
CVE: CVE-2015-0461
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine.
CVSS Score: 7.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032131; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0462
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032124; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0463
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032124; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0464
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032124; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0465
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032124; http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html
CVE: CVE-2015-0466
Published: 2015-04-16
Description: Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/74093; http://www.securitytracker.com/id/1032128
CVE: CVE-2015-0469
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://advisories.mageia.org/MGASA-2015-0158.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html
CVE: CVE-2015-0470
Published: 2015-04-16
Description: Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html; http://rhn.redhat.com/errata/RHSA-2015-0809.html; http://rhn.redhat.com/errata/RHSA-2015-0854.html