CVSS: 7.5EPSS: 52%CPEs: 6EXPL: 0CVE-2014-3576 – ActiveMQ: DoS via unauthenticated remote shutdown command
https://notcve.org/view.php?id=CVE-2014-3576
11 Aug 2015 — The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command. Vulnerabilidad en la función processControlCommand en broker/TransportConnection.java en Apache ActiveMQ en versiones anteriores a 5.11.0, permite a atacantes remotos causar una denegación de servicio (apagado) a través de un comando de apagado. It was found that the Apache ActiveMQ broker exposed a remote shutdown comm... • http://activemq.2283324.n4.nabble.com/About-CVE-2014-3576-tp4699628.html • CWE-264: Permissions, Privileges, and Access Controls CWE-306: Missing Authentication for Critical Function •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2015-2623
https://notcve.org/view.php?id=CVE-2015-2623
16 Jul 2015 — Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces. Vulnerabilidad no especificada en el componente Oracle GlassFish Server en Oracle Fusion Middleware 3.0.1 y 3.1.2, y en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6.0... • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2015-4742
https://notcve.org/view.php?id=CVE-2015-4742
16 Jul 2015 — Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces. Vulnerabilidad no especificada en el componente Oracle JDeveloper en Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0 y 12.1.3.0.0, permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con ADF Faces. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2015-4744
https://notcve.org/view.php?id=CVE-2015-4744
16 Jul 2015 — Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors related to Java Server Faces. Vulnerabilidad no especificada en el componente Oracle GlassFish Server en Oracle Fusion Middleware 2.1.1, 3.0.1 y 3.1.2; y en el Oracle WebLogic Server en Oracle Fusion Middleware 10.3.... • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html •
CVSS: 9.8EPSS: 3%CPEs: 2EXPL: 0CVE-2015-4747
https://notcve.org/view.php?id=CVE-2015-4747
16 Jul 2015 — Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CEP system. Vulnerabilidad no especificada en el componente Oracle Event Processing en Oracle Fusion Middleware 11.1.1.7 y 12.1.3.0, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores relacionados con CEP system. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html •
CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0449
https://notcve.org/view.php?id=CVE-2015-0449
16 Apr 2015 — Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console. Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, y 12.1.2.0 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con Console. • http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0414
https://notcve.org/view.php?id=CVE-2015-0414
21 Jan 2015 — Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Fabric Layer. Vulnerabilidad no especificada en el componente Oracle SOA Suite en Oracle Fusion Middleware 11.1.1.7 y 12.1.3.0 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores no conocidos relacionados con Fabric Layer. • http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0386
https://notcve.org/view.php?id=CVE-2015-0386
21 Jan 2015 — Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191. Vulnerabilidad no especificada en el componente Oracle HTTP Server en Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, y 12.1.3.0 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos... • http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2014-6569
https://notcve.org/view.php?id=CVE-2014-6569
21 Jan 2015 — Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components. Vulnerabilidad no especificada en el componente Oracle WebLogic Server de Oracle Fusion Middleware 10.0.20, 10.3.6.0, 12.1.1.0 y 12.1.2.0 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con CIE Related Components. • http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html •
CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0CVE-2014-6571
https://notcve.org/view.php?id=CVE-2014-6571
21 Jan 2015 — Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2011-1944. Vulnerabilidad no especificada en el componente Oracle HTTP Server de Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0 y 12.1.3.0 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a tra... • http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html •