Total
210374 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2013-3811 | 1 Oracle | 1 Mysql | 2017-08-28 | 3.5 LOW | N/A |
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3806. | |||||
CVE-2013-3816 | 1 Oracle | 1 Industry Applications | 2017-08-28 | 4.0 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine. | |||||
CVE-2013-3818 | 1 Oracle | 1 Peoplesoft Products | 2017-08-28 | 4.3 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-2404. | |||||
CVE-2013-3819 | 1 Oracle | 1 Peoplesoft Products | 2017-08-28 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Mobile Applications. | |||||
CVE-2013-3820 | 1 Oracle | 1 Peoplesoft Products | 2017-08-28 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via unknown vectors related to Business Interlink. | |||||
CVE-2013-3821 | 1 Oracle | 1 Peoplesoft Products | 2017-08-28 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker. | |||||
CVE-2013-3822 | 1 Oracle | 1 Supply Chain Products Suite | 2017-08-28 | 4.3 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS). | |||||
CVE-2013-3824 | 1 Oracle | 1 Supply Chain Products Suite | 2017-08-28 | 4.0 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts. | |||||
CVE-2013-3825 | 1 Oracle | 1 Supply Chain Products Suite | 2017-08-28 | 4.0 MEDIUM | N/A |
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment. | |||||
CVE-2013-3921 | 1 Easytimestudio | 1 Easy File Manager | 2017-08-28 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) to the default URI. | |||||
CVE-2013-3922 | 1 Gummybearstudios | 1 Ftp Drive \+ Http Server | 2017-08-28 | 7.8 HIGH | N/A |
Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request. | |||||
CVE-2013-3923 | 1 Savysoda | 1 Wifi Free Hd | 2017-08-28 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in SavySoda WiFi HD Free before 7.0 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request. | |||||
CVE-2013-3928 | 1 Jpchacha | 1 Chasys Draw Ies | 2017-08-28 | 9.3 HIGH | N/A |
Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file. | |||||
CVE-2013-3961 | 1 Abeel | 1 Simple Php Agenda | 2017-08-28 | 6.5 MEDIUM | N/A |
SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter. | |||||
CVE-2013-3971 | 1 Ibm | 1 Maximo Asset Management | 2017-08-28 | 4.0 MEDIUM | N/A |
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049. | |||||
CVE-2013-3972 | 1 Ibm | 1 Maximo Asset Management | 2017-08-28 | 4.0 MEDIUM | N/A |
IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. | |||||
CVE-2013-3973 | 1 Ibm | 1 Maximo Asset Management | 2017-08-28 | 6.5 MEDIUM | N/A |
SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | |||||
CVE-2013-3975 | 1 Ibm | 1 Sametime | 2017-08-28 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search. | |||||
CVE-2013-3976 | 1 Ibm | 4 Data Protection, Flashcopy Manager, Tivoli Storage Flashcopy Manager and 1 more | 2017-08-28 | 2.1 LOW | N/A |
The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore. | |||||
CVE-2013-3977 | 1 Ibm | 1 Sametime | 2017-08-28 | 4.3 MEDIUM | N/A |
The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names. |