rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-2355 GE Proficy HMI/SCADA CIMPLICITY CimView
The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: GE
product: Proficy HMI/SCADA–CIMPLICITY
default_status: unaffected
Credits: lang: en
value: Said Arfi
Published: 2015-01-17T02:00:00.000Z
CVE-2014-2356 Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Innominate
product: mGuard
default_status: unaffected
Credits: lang: en
value: Applied Risk Research team
Published: 2014-07-30T14:00:00.000Z
CVE-2014-2357 SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol Improper Input Validation
The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service (persistent service crash) via a long RTU-to-Master message.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SUBNET
product: SubSTATION Server 2 Telegyr 8979 Master Protocol
default_status: unaffected
Credits: lang: en
value: Adam Crain of Automatak and Chris Sistrunk of Mandiant
Published: 2014-08-11T22:00:00.000Z
CVE-2014-2358 Fox-IT DataDiode Appliance CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: Fox-IT
product: DataDiode Appliance
default_status: unaffected
Credits: lang: en
value: Tudor Enache of HelpAG
Published: 2014-10-19T01:00:00.000Z
CVE-2014-2359 
OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-06T16:00:00.000Z
CVE-2014-2360 OleumTech WIO Family Improper Input Validation
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: OleumTech
product: WIO DH2 Wireless Gateway
default_status: unaffected
vendor: OleumTech
product: Sensor Wireless I/O Modules
default_status: unaffected
Credits: lang: en
value: Lucas Apa and Carlos Mario Penagos Hollman of IOActive
Published: 2014-07-24T14:00:00.000Z
CVE-2014-2361 OleumTech WIO Family Key Management Errors
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.
Problem types: cwe_id: CWE-320
description: CWE-320
Affected products: vendor: OleumTech
product: WIO DH2 Wireless Gateway
default_status: unaffected
vendor: OleumTech
product: Sensor Wireless I/O Modules
default_status: unaffected
Credits: lang: en
value: Lucas Apa and Carlos Mario Penagos Hollman of IOActive
Published: 2014-07-24T14:00:00.000Z
CVE-2014-2362 OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
Problem types: cwe_id: CWE-338
description: CWE-338
Affected products: vendor: OleumTech
product: WIO DH2 Wireless Gateway
default_status: unaffected
vendor: OleumTech
product: Sensor Wireless I/O Modules
default_status: unaffected
Credits: lang: en
value: Lucas Apa and Carlos Mario Penagos Hollman of IOActive
Published: 2014-07-24T14:00:00.000Z
CVE-2014-2363 Morpho Itemiser 3 Hard-Coded Credential
Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request.
Problem types: cwe_id: CWE-259
description: CWE-259
Affected products: vendor: Morpho
product: Itemiser 3
default_status: unaffected
Credits: lang: en
value: Billy Rios and Terry McCorkle
Published: 2014-07-26T10:00:00.000Z
CVE-2014-2364 Advantech WebAccess Stack-Based Buffer Overflow
Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Advantech
product: WebAccess
default_status: unaffected
Credits: lang: en
value: reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others
Published: 2014-07-19T01:00:00.000Z
CVE-2014-2365 Advantech WebAccess Improper Access Control
Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Advantech
product: WebAccess
default_status: unaffected
Credits: lang: en
value: reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others
Published: 2014-07-19T01:00:00.000Z
CVE-2014-2366 Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
Problem types: cwe_id: CWE-316
description: CWE-316
Affected products: vendor: Advantech
product: WebAccess
default_status: unaffected
Credits: lang: en
value: reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others
Published: 2014-07-19T01:00:00.000Z
CVE-2014-2367 Advantech WebAccess Authentication Bypass Issues
The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: Advantech
product: WebAccess
default_status: unaffected
Credits: lang: en
value: reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others
Published: 2014-07-19T01:00:00.000Z
CVE-2014-2368 Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Problem types: cwe_id: CWE-623
description: CWE-623
Affected products: vendor: Advantech
product: WebAccess
default_status: unaffected
Credits: lang: en
value: reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others
Published: 2014-07-19T01:00:00.000Z
CVE-2014-2369 Omron NS Series HMI Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: Omron
product: NS15
default_status: unaffected
vendor: Omron
product: NS12
default_status: unaffected
vendor: Omron
product: NS10
default_status: unaffected
vendor: Omron
product: NS8
default_status: unaffected
vendor: Omron
product: NS5
default_status: unaffected
Credits: lang: en
value: Joel Sevilleja Febrer of S2 Grupo
Published: 2014-07-24T14:00:00.000Z
CVE-2014-2370 Omron NS Series HMI Improper Neutralization of Input During Web Page Generation
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Omron
product: NS15
default_status: unaffected
vendor: Omron
product: NS12
default_status: unaffected
vendor: Omron
product: NS10
default_status: unaffected
vendor: Omron
product: NS8
default_status: unaffected
vendor: Omron
product: NS5
default_status: unaffected
Credits: lang: en
value: Joel Sevilleja Febrer of S2 Grupo
Published: 2014-07-24T14:00:00.000Z
CVE-2014-2373 Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security
The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.
Problem types: cwe_id: CWE-602
description: CWE-602
Affected products: vendor: Accuenergy
product: Accuenergy Acuvim II AXN-NET Ethernet module
default_status: unaffected
Credits: lang: en
value: Laisvis Lingvevicius
Published: 2014-11-05T11:00:00.000Z
CVE-2014-2374 Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security
The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.
Problem types: cwe_id: CWE-602
description: CWE-602
Affected products: vendor: Accuenergy
product: Accuenergy Acuvim II AXN-NET Ethernet module
default_status: unaffected
Credits: lang: en
value: Laisvis Lingvevicius
Published: 2014-11-05T11:00:00.000Z
CVE-2014-2375 Ecava IntegraXor SCADA Server External Control of File Name or Path
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
Problem types: cwe_id: CWE-73
description: CWE-73
Affected products: vendor: Ecava
product: IntegraXor SCADA Server
default_status: unaffected
Credits: lang: en
value: Andrea Micalizzi
Published: 2014-09-15T14:00:00.000Z
CVE-2014-2376 Ecava IntegraXor SCADA Server SQL Injection
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: Ecava
product: IntegraXor SCADA Server
default_status: unaffected
Credits: lang: en
value: Andrea Micalizzi
Published: 2014-09-15T14:00:00.000Z
CVE-2014-2377 Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.
Problem types: cwe_id: CWE-526
description: CWE-526
Affected products: vendor: Ecava
product: IntegraXor SCADA Server
default_status: unaffected
Credits: lang: en
value: Andrea Micalizzi
Published: 2014-09-15T14:00:00.000Z
CVE-2014-2378 Sensys Networks Traffic Sensor Download of Code Without Integrity Check
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
Problem types: cwe_id: CWE-494
description: CWE-494
Affected products: vendor: Sensys Networks
product: VSN240-F
default_status: unaffected
vendor: Sensys Networks
product: VSN240-T
default_status: unaffected
Credits: lang: en
value: Cesar Cerrudo of IOActive
Published: 2014-09-05T17:00:00.000Z
CVE-2014-2379 Sensys Networks Traffic Sensor Missing Encryption of Sensitive Data
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network.
Problem types: cwe_id: CWE-311
description: CWE-311
Affected products: vendor: Sensys Networks
product: VSN240-F
default_status: unaffected
vendor: Sensys Networks
product: VSN240-T
default_status: unaffected
Credits: lang: en
value: Cesar Cerrudo of IOActive
Published: 2014-09-05T17:00:00.000Z
CVE-2014-2380 Schneider Electric Wonderware Inadequate Encryption Strength
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.
Problem types: cwe_id: CWE-326
description: CWE-326
Affected products: vendor: Schneider Electric
product: Wonderware Information Server Portal
default_status: unaffected
Credits: lang: en
value: Timur Yunusov, Ilya Karpov, Sergey Gordeychik, Alexey Osipov, and Dmitry Serebryannikov of the Positive Technologies Research Team
Published: 2014-08-28T01:00:00.000Z
CVE-2014-2381 Schneider Electric Wonderware Inadequate Encryption Strength
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.
Problem types: cwe_id: CWE-326
description: CWE-326
Affected products: vendor: Schneider Electric
product: Wonderware Information Server Portal
default_status: unaffected
Credits: lang: en
value: Timur Yunusov, Ilya Karpov, Sergey Gordeychik, Alexey Osipov, and Dmitry Serebryannikov of the Positive Technologies Research Team
Published: 2014-08-28T01:00:00.000Z
CVE-2014-2382 
The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-20T11:00:00.000Z
CVE-2014-2383 
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-28T00:00:00.000Z
CVE-2014-2384 
vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call.  NOTE: the researcher reports "Vendor rated issue as non-exploitable."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-15T20:00:00.000Z
CVE-2014-2385 
Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter to exclusion/configure or (4) text:EmailServer or (5) newListList:Email parameter to notification/configure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-22T14:00:00.000Z
CVE-2014-2386 
Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function in cgi/cgiutils.c or (5) status_page_num_selector function in cgi/status.c, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-25T15:00:00.000Z
CVE-2014-2387 
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-13T13:12:51.000Z
CVE-2014-2388 
The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via (1) a session over a Wi-Fi network or (2) a session over a USB connection in Development Mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-18T10:00:00.000Z
CVE-2014-2389 
Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-12T01:00:00.000Z
CVE-2014-2390 
Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-29T17:00:00.000Z
CVE-2014-2391 
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potentially useful password-pattern information by reading (1) a web-server access log, (2) a web-server Referer log, or (3) browser history that contains this string because of its presence in a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-17T20:00:00.000Z
CVE-2014-2392 
The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-17T20:00:00.000Z
CVE-2014-2393 
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7.4.2 before 7.4.2-rev13 allows remote attackers to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an e-mail attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-17T20:00:00.000Z
CVE-2014-2397 
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2398 
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2399 
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2400 
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2399.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2401 
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2402 
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2403 
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2404 
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2405 
Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-14T00:00:00.000Z
CVE-2014-2406 
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2407 
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416, CVE-2014-2417, and CVE-2014-2418.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z
CVE-2014-2408 
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-16T01:00:00.000Z