# CVEs published 2015-01-21

164 CVEs were published on January 21, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0411](https://cve.now/CVE-2015-0411.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2015-0412](https://cve.now/CVE-2015-0412.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2015-0413](https://cve.now/CVE-2015-0413.md): Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceabili (no CVSS)
- [CVE-2015-0414](https://cve.now/CVE-2015-0414.md): Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated us (no CVSS)
- [CVE-2015-0415](https://cve.now/CVE-2015-0415.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated u (no CVSS)
- [CVE-2015-0416](https://cve.now/CVE-2015-0416.md): Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to (no CVSS)
- [CVE-2015-0417](https://cve.now/CVE-2015-0417.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to aff (no CVSS)
- [CVE-2015-0418](https://cve.now/CVE-2015-0418.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2 (no CVSS)
- [CVE-2015-0419](https://cve.now/CVE-2015-0419.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confid (no CVSS)
- [CVE-2015-0420](https://cve.now/CVE-2015-0420.md): Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect (no CVSS)
- [CVE-2015-0421](https://cve.now/CVE-2015-0421.md): Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vecto (no CVSS)
- [CVE-2015-0422](https://cve.now/CVE-2015-0422.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-0424](https://cve.now/CVE-2015-0424.md): Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 all (no CVSS)
- [CVE-2015-0425](https://cve.now/CVE-2015-0425.md): Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers t (no CVSS)
- [CVE-2015-0426](https://cve.now/CVE-2015-0426.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 (no CVSS)
- [CVE-2015-0427](https://cve.now/CVE-2015-0427.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to af (no CVSS)
- [CVE-2015-0428](https://cve.now/CVE-2015-0428.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource (no CVSS)
- [CVE-2015-0429](https://cve.now/CVE-2015-0429.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC (no CVSS)
- [CVE-2015-0430](https://cve.now/CVE-2015-0430.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility. (no CVSS)
- [CVE-2015-0431](https://cve.now/CVE-2015-0431.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3 (no CVSS)
- [CVE-2015-0432](https://cve.now/CVE-2015-0432.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2015-0434](https://cve.now/CVE-2015-0434.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allo (no CVSS)
- [CVE-2015-0435](https://cve.now/CVE-2015-0435.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-0436](https://cve.now/CVE-2015-0436.md): Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentialit (no CVSS)
- [CVE-2015-0437](https://cve.now/CVE-2015-0437.md): Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown (no CVSS)
- [CVE-2013-6892](https://cve.now/CVE-2013-6892.md): WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit. (no CVSS)
- [CVE-2014-6598](https://cve.now/CVE-2014-6598.md): Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, a (no CVSS)
- [CVE-2014-6599](https://cve.now/CVE-2014-6599.md): Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated (no CVSS)
- [CVE-2014-6600](https://cve.now/CVE-2014-6600.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a d (no CVSS)
- [CVE-2014-6601](https://cve.now/CVE-2014-6601.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2014-8152](https://cve.now/CVE-2014-8152.md): Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism (no CVSS, org.apache.santuario:xmlsec)
- [CVE-2014-9620](https://cve.now/CVE-2014-9620.md): The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes. (no CVSS)
- [CVE-2014-9621](https://cve.now/CVE-2014-9621.md): The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string. (no CVSS)
- [CVE-2014-9622](https://cve.now/CVE-2014-9622.md): Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers (no CVSS)
- [CVE-2015-0362](https://cve.now/CVE-2015-0362.md): Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attacker (no CVSS)
- [CVE-2015-0363](https://cve.now/CVE-2015-0363.md): Unspecified vulnerability in the Siebel Core EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect (no CVSS)
- [CVE-2015-0364](https://cve.now/CVE-2015-0364.md): Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affec (no CVSS)
- [CVE-2015-0365](https://cve.now/CVE-2015-0365.md): Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers (no CVSS)
- [CVE-2015-0366](https://cve.now/CVE-2015-0366.md): Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confiden (no CVSS)
- [CVE-2015-0367](https://cve.now/CVE-2015-0367.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allo (no CVSS)
- [CVE-2015-0368](https://cve.now/CVE-2015-0368.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3. (no CVSS)
- [CVE-2015-0369](https://cve.now/CVE-2015-0369.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integr (no CVSS)
- [CVE-2015-0370](https://cve.now/CVE-2015-0370.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote aut (no CVSS)
- [CVE-2015-0371](https://cve.now/CVE-2015-0371.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote aut (no CVSS)
- [CVE-2015-0372](https://cve.now/CVE-2015-0372.md): Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect (no CVSS)
- [CVE-2015-0373](https://cve.now/CVE-2015-0373.md): Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2015-0374](https://cve.now/CVE-2015-0374.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confi (no CVSS)
- [CVE-2015-0375](https://cve.now/CVE-2015-0375.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to N (no CVSS)
- [CVE-2015-0376](https://cve.now/CVE-2015-0376.md): Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect (no CVSS)
- [CVE-2015-0377](https://cve.now/CVE-2015-0377.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2 (no CVSS)
- [CVE-2015-0378](https://cve.now/CVE-2015-0378.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Libc. (no CVSS)
- [CVE-2015-0379](https://cve.now/CVE-2015-0379.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to a (no CVSS)
- [CVE-2015-0380](https://cve.now/CVE-2015-0380.md): Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5 (no CVSS)
- [CVE-2015-0381](https://cve.now/CVE-2015-0381.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability vi (no CVSS)
- [CVE-2015-0382](https://cve.now/CVE-2015-0382.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability vi (no CVSS)
- [CVE-2015-0383](https://cve.now/CVE-2015-0383.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 all (no CVSS)
- [CVE-2015-0384](https://cve.now/CVE-2015-0384.md): Unspecified vulnerability in the Siebel Public Sector component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to af (no CVSS)
- [CVE-2015-0385](https://cve.now/CVE-2015-0385.md): Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0386](https://cve.now/CVE-2015-0386.md): Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote a (no CVSS)
- [CVE-2015-0387](https://cve.now/CVE-2015-0387.md): Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated (no CVSS)
- [CVE-2015-0388](https://cve.now/CVE-2015-0388.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to aff (no CVSS)
- [CVE-2015-0389](https://cve.now/CVE-2015-0389.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users (no CVSS)
- [CVE-2015-0390](https://cve.now/CVE-2015-0390.md): Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0 (no CVSS)
- [CVE-2015-0391](https://cve.now/CVE-2015-0391.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0392](https://cve.now/CVE-2015-0392.md): Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authentic (no CVSS)
- [CVE-2015-0393](https://cve.now/CVE-2015-0393.md): Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and (no CVSS)
- [CVE-2015-0394](https://cve.now/CVE-2015-0394.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authe (no CVSS)
- [CVE-2015-0395](https://cve.now/CVE-2015-0395.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and a (no CVSS)
- [CVE-2015-0396](https://cve.now/CVE-2015-0396.md): Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to af (no CVSS)
- [CVE-2015-0397](https://cve.now/CVE-2015-0397.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a d (no CVSS)
- [CVE-2015-0398](https://cve.now/CVE-2015-0398.md): Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to af (no CVSS)
- [CVE-2015-0399](https://cve.now/CVE-2015-0399.md): Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1 (no CVSS)
- [CVE-2015-0400](https://cve.now/CVE-2015-0400.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors relat (no CVSS)
- [CVE-2015-0401](https://cve.now/CVE-2015-0401.md): Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows re (no CVSS)
- [CVE-2015-0402](https://cve.now/CVE-2015-0402.md): Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers (no CVSS)
- [CVE-2015-0403](https://cve.now/CVE-2015-0403.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2015-0404](https://cve.now/CVE-2015-0404.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2. (no CVSS)
- [CVE-2015-0406](https://cve.now/CVE-2015-0406.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unkn (no CVSS)
- [CVE-2015-0407](https://cve.now/CVE-2015-0407.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vecto (no CVSS)
- [CVE-2015-0408](https://cve.now/CVE-2015-0408.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and a (no CVSS)
- [CVE-2015-0409](https://cve.now/CVE-2015-0409.md): Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0410](https://cve.now/CVE-2015-0410.md): Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedd (no CVSS)
- [CVE-2015-0554](https://cve.now/CVE-2015-0554.md): The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG\_TEF\_SP\_4.06L.6 does not properly restrict access to the w (no CVSS)
- [CVE-2015-1038](https://cve.now/CVE-2015-1038.md): p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive. (no CVSS)
- [CVE-2015-1191](https://cve.now/CVE-2015-1191.md): Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) (no CVSS)
- [CVE-2015-1192](https://cve.now/CVE-2015-1192.md): Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted arch (no CVSS)
- [CVE-2015-1193](https://cve.now/CVE-2015-1193.md): Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (no CVSS)
- [CVE-2015-1194](https://cve.now/CVE-2015-1194.md): pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive. (no CVSS)
- [CVE-2015-1195](https://cve.now/CVE-2015-1195.md): The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticate (no CVSS, glance)
- [CVE-2015-1196](https://cve.now/CVE-2015-1196.md): GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. (no CVSS)
- [CVE-2014-8478](https://cve.now/CVE-2014-8478.md): The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remot (no CVSS)
- [CVE-2014-8479](https://cve.now/CVE-2014-8479.md): The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remot (no CVSS)
- [CVE-2015-1048](https://cve.now/CVE-2015-1048.md): Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attac (no CVSS)
- [CVE-2014-6541](https://cve.now/CVE-2014-6541.md): Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2, when run (no CVSS)
- [CVE-2014-6548](https://cve.now/CVE-2014-6548.md): Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentialit (no CVSS)
- [CVE-2014-6549](https://cve.now/CVE-2014-6549.md): Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown (no CVSS)
- [CVE-2014-6556](https://cve.now/CVE-2014-6556.md): Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and (no CVSS)
- [CVE-2014-6565](https://cve.now/CVE-2014-6565.md): Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to aff (no CVSS)
- [CVE-2014-6566](https://cve.now/CVE-2014-6566.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated (no CVSS)
- [CVE-2014-6567](https://cve.now/CVE-2014-6567.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-6568](https://cve.now/CVE-2014-6568.md): Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2014-6569](https://cve.now/CVE-2014-6569.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 all (no CVSS)
- [CVE-2014-6570](https://cve.now/CVE-2014-6570.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a d (no CVSS)
- [CVE-2014-6571](https://cve.now/CVE-2014-6571.md): Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote a (no CVSS)
- [CVE-2014-6572](https://cve.now/CVE-2014-6572.md): Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12 (no CVSS)
- [CVE-2014-6573](https://cve.now/CVE-2014-6573.md): Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows (no CVSS)
- [CVE-2014-6574](https://cve.now/CVE-2014-6574.md): Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 6.1.0.3 allows remote attacker (no CVSS)
- [CVE-2014-6575](https://cve.now/CVE-2014-6575.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via unknown vectors related to Netw (no CVSS)
- [CVE-2014-6576](https://cve.now/CVE-2014-6576.md): Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1 (no CVSS)
- [CVE-2014-6577](https://cve.now/CVE-2014-6577.md): Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 al (no CVSS)
- [CVE-2014-6578](https://cve.now/CVE-2014-6578.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows rem (no CVSS)
- [CVE-2014-6579](https://cve.now/CVE-2014-6579.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authe (no CVSS)
- [CVE-2014-6580](https://cve.now/CVE-2014-6580.md): Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attacker (no CVSS)
- [CVE-2014-6581](https://cve.now/CVE-2014-6581.md): Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1 (no CVSS)
- [CVE-2014-6582](https://cve.now/CVE-2014-6582.md): Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, (no CVSS)
- [CVE-2014-6583](https://cve.now/CVE-2014-6583.md): Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, an (no CVSS)
- [CVE-2014-6584](https://cve.now/CVE-2014-6584.md): Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allow (no CVSS)
- [CVE-2014-6585](https://cve.now/CVE-2014-6585.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vecto (no CVSS)
- [CVE-2014-6586](https://cve.now/CVE-2014-6586.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to (no CVSS)
- [CVE-2014-6587](https://cve.now/CVE-2014-6587.md): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2014-6588](https://cve.now/CVE-2014-6588.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affe (no CVSS)
- [CVE-2014-6589](https://cve.now/CVE-2014-6589.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affe (no CVSS)
- [CVE-2014-6590](https://cve.now/CVE-2014-6590.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affe (no CVSS)
- [CVE-2014-6591](https://cve.now/CVE-2014-6591.md): Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confiden (no CVSS)
- [CVE-2014-6592](https://cve.now/CVE-2014-6592.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users (no CVSS)
- [CVE-2014-6593](https://cve.now/CVE-2014-6593.md): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allow (no CVSS)
- [CVE-2014-6594](https://cve.now/CVE-2014-6594.md): Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentialit (no CVSS)
- [CVE-2014-6595](https://cve.now/CVE-2014-6595.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affe (no CVSS)
- [CVE-2014-6596](https://cve.now/CVE-2014-6596.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integr (no CVSS)
- [CVE-2014-6597](https://cve.now/CVE-2014-6597.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remot (no CVSS)
- [CVE-2015-0553](https://cve.now/CVE-2015-0553.md): Cross-site scripting (XSS) vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 SP3 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2015-1028](https://cve.now/CVE-2015-1028.md): Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE\_1.01 allow remote authenticated use (no CVSS)
- [CVE-2015-1032](https://cve.now/CVE-2015-1032.md): Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2015-1164](https://cve.now/CVE-2015-1164.md): Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redire (no CVSS, serve-static)
- [CVE-2015-1204](https://cve.now/CVE-2015-1204.md): Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remot (no CVSS)
- [CVE-2014-3440](https://cve.now/CVE-2014-3440.md): The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center (no CVSS)
- [CVE-2014-6172](https://cve.now/CVE-2014-6172.md): IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspeci (no CVSS)
- [CVE-2014-7289](https://cve.now/CVE-2014-7289.md): SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center (no CVSS)
- [CVE-2014-8913](https://cve.now/CVE-2014-8913.md): Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, a (no CVSS)
- [CVE-2014-8914](https://cve.now/CVE-2014-8914.md): Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, a (no CVSS)
- [CVE-2014-9224](https://cve.now/CVE-2014-9224.md): Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critic (no CVSS)
- [CVE-2014-9225](https://cve.now/CVE-2014-9225.md): The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Securi (no CVSS)
- [CVE-2014-9226](https://cve.now/CVE-2014-9226.md): The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SD (no CVSS)
- [CVE-2014-9597](https://cve.now/CVE-2014-9597.md): The picture\_pool\_Delete function in misc/picture\_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2014-9598](https://cve.now/CVE-2014-9598.md): The picture\_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2015-0513](https://cve.now/CVE-2015-0513.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SR (no CVSS)
- [CVE-2015-0514](https://cve.now/CVE-2015-0514.md): EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery creden (no CVSS)
- [CVE-2015-0515](https://cve.now/CVE-2015-0515.md): Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users t (no CVSS)
- [CVE-2015-0516](https://cve.now/CVE-2015-0516.md): Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to rea (no CVSS)
- [CVE-2015-0867](https://cve.now/CVE-2015-0867.md): Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a c (no CVSS)
- [CVE-2014-0191](https://cve.now/CVE-2014-0191.md): The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion (no CVSS)
- [CVE-2014-4259](https://cve.now/CVE-2014-4259.md): Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated user (no CVSS)
- [CVE-2014-4279](https://cve.now/CVE-2014-4279.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated (no CVSS)
- [CVE-2014-6480](https://cve.now/CVE-2014-6480.md): Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect con (no CVSS)
- [CVE-2014-6481](https://cve.now/CVE-2014-6481.md): Unspecified vulnerability in Oracle Solaris 10 and 11 allows remote attackers to affect confidentiality via vectors related to KSSL. (no CVSS)
- [CVE-2014-6509](https://cve.now/CVE-2014-6509.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability via unknown vectors related to Kernel. (no CVSS)
- [CVE-2014-6510](https://cve.now/CVE-2014-6510.md): Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors (no CVSS)
- [CVE-2014-6514](https://cve.now/CVE-2014-6514.md): Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authent (no CVSS)
- [CVE-2014-6518](https://cve.now/CVE-2014-6518.md): Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to Unix Fi (no CVSS)
- [CVE-2014-6521](https://cve.now/CVE-2014-6521.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related (no CVSS)
- [CVE-2014-6524](https://cve.now/CVE-2014-6524.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors (no CVSS)
- [CVE-2014-6525](https://cve.now/CVE-2014-6525.md): Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, (no CVSS)
- [CVE-2014-6526](https://cve.now/CVE-2014-6526.md): Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attacker (no CVSS)
- [CVE-2014-6528](https://cve.now/CVE-2014-6528.md): Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.