rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-2368 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors, aka ZDI-CAN-1669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-2369 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-2370 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-2371 
The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-15T14:00:00.000Z
CVE-2013-2372 
Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-15T14:00:00.000Z
CVE-2013-2373 
The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-15T14:00:00.000Z
CVE-2013-2374 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Rich Text Editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2375 
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2376 
Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2377 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to My Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2378 
Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2379 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows remote authenticated users to affect integrity via unknown vectors related to RT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2380 
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and R28.2.6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: this might be a duplicate of CVE-2013-1537 and CVE-2013-2415. If so, then CVE-2013-2380 might be REJECTed in the future.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2381 
Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server Privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2382 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows local users to affect confidentiality via vectors related to BASE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2383 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2384 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2385 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via vectors related to BASE, a different vulnerability than CVE-2013-1560.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2386 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect integrity and availability via vectors related to BASE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2387 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2388 
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2389 
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2390 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2, 10.3.5, 10.3.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors related to WebLogic Console, a different vulnerability than CVE-2013-1504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2391 
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2392 
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2393 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2394 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2395 
Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-1567.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2396 
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via vectors related to HTML OAM client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2397 
Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Customer Operations (Add, Search).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2398 
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Open UI Client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2399 
Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2400 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T22:00:00.000Z
CVE-2013-2401 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via unknown vectors related to Portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2402 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to WorkCenter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2403 
Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-0416.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2404 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-3818.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2405 
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2406 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2407 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T22:00:00.000Z
CVE-2013-2408 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology and use of Internet Explorer 6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2409 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality via vectors related to PIA Core Technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2410 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2411 
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2412 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T22:00:00.000Z
CVE-2013-2413 
Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T14:00:00.000Z
CVE-2013-2414 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2427, and CVE-2013-2428.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2415 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2416 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2417 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2418 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2419 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2420 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2421 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect MethodHandle lookups, which allows remote attackers to bypass Java sandbox restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2422 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2423 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z
CVE-2013-2424 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T15:00:00.000Z