CVEs

100,075 total · page 1940 of 2,002

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-6356	Cisco Systems, Inc. AsyncOS Software for Cisco Email Security Appliances	Hig	0.49	7.5	0.03	Oct 28, 2016	A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS)…
CVE-2016-1486	Cisco Systems, Inc. AsyncOS Software	Hig	0.49	7.5	0.03	Oct 28, 2016	A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and…
CVE-2016-1481	Cisco Systems, Inc. AsyncOS Software for Cisco Email Security Appliances	Hig	0.49	7.5	0.03	Oct 28, 2016	A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affects…
CVE-2016-1480	Cisco Systems, Inc. AsyncOS Software for Cisco Email Security Appliances	Hig	0.49	7.5	0.02	Oct 28, 2016	A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device.…
CVE-2016-6446	Cisco Systems, Inc. Meeting Server	Hig	0.49	7.5	0.01	Oct 27, 2016	A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.
CVE-2016-6444	Cisco Systems, Inc. Meeting Server	Hig	0.57	8.8	0.01	Oct 27, 2016	A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.
CVE-2016-6443	Cisco Systems, Inc. Prime Infrastructure	Hig	0.57	8.8	0.03	Oct 27, 2016	A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability.…
CVE-2016-6442	Cisco Systems, Inc. Finesse	Hig	0.57	8.8	0.01	Oct 27, 2016	A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.0(1).
CVE-2016-6439	Cisco Systems, Inc. Secure Firewall Management Center	Hig	0.49	7.5	0.02	Oct 27, 2016	A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerability is…
CVE-2016-6432	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.53	8.1	0.07	Oct 27, 2016	A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area.…
CVE-2016-6431	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.49	7.5	0.03	Oct 27, 2016	A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment…
CVE-2016-1000122	Huge It Slider	Hig	0.47	7.2	0.02	Oct 27, 2016	XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
CVE-2016-1000120	Huge It Catalog	Hig	0.47	7.2	0.02	Oct 27, 2016	SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
CVE-2016-5764	Microfocus Rumba FTP client	Hig	0.61	8.8	0.08	Oct 27, 2016	Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.
CVE-2016-8503	Yandex Yandex.browser	Hig	0.48	7.3	0.01	Oct 26, 2016	Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8502	Yandex Yandex.browser	Hig	0.48	7.3	0.01	Oct 26, 2016	Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8296	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.50	7.6	0.01	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.
CVE-2016-8293	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-8291	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
CVE-2016-8281	Oracle Corporation Platform Security For Java	Hig	0.50	7.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5625	Oracle Corporation MySQL	Hig	0.46	7.0	0.00	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
CVE-2016-5619	Oracle Corporation Flexcube Universal Banking	Hig	0.53	8.1	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5607	Oracle Corporation Flexcube Universal Banking	Hig	0.57	8.8	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors…
CVE-2016-5595	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5588	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5587	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5579	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5578	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5577	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5574	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5573	Oracle Corporation Java SE Embedded	Hig	0.54	8.3	0.03	Oct 25, 2016	Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
CVE-2016-5565	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.50	7.7	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.
CVE-2016-5564	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.48	7.4	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…
CVE-2016-5563	Oracle Corporation Hospitality Opera 5 Property Services	Hig	0.51	7.9	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators to affect confidentiality, integrity, and availability via vectors related to…
CVE-2016-5562	Oracle Corporation Iprocurement	Hig	0.49	7.6	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5558	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.03	Oct 25, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5557	Oracle Corporation Advanced Pricing	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5544	Oracle Corporation Solaris	Hig	0.51	7.8	0.00	Oct 25, 2016	Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.
CVE-2016-5539	Oracle Corporation Retail Applications	Hig	0.47	7.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5536	Oracle Corporation Platform Security For Java	Hig	0.50	7.6	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5526	Oracle Corporation Agile Plm	Hig	0.48	7.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.
CVE-2016-5523	Oracle Corporation Supply Chain Products Suite	Hig	0.57	8.8	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.
CVE-2016-5519	Oracle Corporation Glassfish Server	Hig	0.57	8.8	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.
CVE-2016-5518	Oracle Corporation Agile Engineering Data Management	Hig	0.53	8.1	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5515	Oracle Corporation Supply Chain Products Suite	Hig	0.57	8.8	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.

CVE-2016-6356HigOct 28, 2016
Cisco Systems, Inc.
AsyncOS Software for Cisco Email Security Appliances
risk 0.49cvss 7.5epss 0.03
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS)…
CVE-2016-1486HigOct 28, 2016
Cisco Systems, Inc.
AsyncOS Software
risk 0.49cvss 7.5epss 0.03
A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and…
CVE-2016-1481HigOct 28, 2016
Cisco Systems, Inc.
AsyncOS Software for Cisco Email Security Appliances
risk 0.49cvss 7.5epss 0.03
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affects…
CVE-2016-1480HigOct 28, 2016
Cisco Systems, Inc.
AsyncOS Software for Cisco Email Security Appliances
risk 0.49cvss 7.5epss 0.02
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device.…
CVE-2016-6446HigOct 27, 2016
Cisco Systems, Inc.
Meeting Server
risk 0.49cvss 7.5epss 0.01
A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.
CVE-2016-6444HigOct 27, 2016
Cisco Systems, Inc.
Meeting Server
risk 0.57cvss 8.8epss 0.01
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.
CVE-2016-6443HigOct 27, 2016
Cisco Systems, Inc.
Prime Infrastructure
risk 0.57cvss 8.8epss 0.03
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability.…
CVE-2016-6442HigOct 27, 2016
Cisco Systems, Inc.
Finesse
risk 0.57cvss 8.8epss 0.01
A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.0(1).
CVE-2016-6439HigOct 27, 2016
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.49cvss 7.5epss 0.02
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerability is…
CVE-2016-6432HigOct 27, 2016
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.53cvss 8.1epss 0.07
A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area.…
CVE-2016-6431HigOct 27, 2016
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.49cvss 7.5epss 0.03
A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment…
CVE-2016-1000122HigOct 27, 2016
Huge It
Slider
risk 0.47cvss 7.2epss 0.02
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
CVE-2016-1000120HigOct 27, 2016
Huge It
Catalog
risk 0.47cvss 7.2epss 0.02
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
CVE-2016-5764HigOct 27, 2016
Microfocus
Rumba FTP client
risk 0.61cvss 8.8epss 0.08
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.
CVE-2016-8503HigOct 26, 2016
Yandex
Yandex.browser
risk 0.48cvss 7.3epss 0.01
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8502HigOct 26, 2016
Yandex
Yandex.browser
risk 0.48cvss 7.3epss 0.01
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8296HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.50cvss 7.6epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.
CVE-2016-8293HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…
CVE-2016-8291HigOct 25, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.
CVE-2016-8281HigOct 25, 2016
Oracle Corporation
Platform Security For Java
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5625HigOct 25, 2016
Oracle Corporation
MySQL
risk 0.46cvss 7.0epss 0.00
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
CVE-2016-5619HigOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.53cvss 8.1epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…
CVE-2016-5607HigOct 25, 2016
Oracle Corporation
Flexcube Universal Banking
risk 0.57cvss 8.8epss 0.02
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors…
CVE-2016-5595HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589HigOct 25, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5588HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5587HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586HigOct 25, 2016
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5579HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5578HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5577HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5574HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5573HigOct 25, 2016
Oracle Corporation
Java SE Embedded
risk 0.54cvss 8.3epss 0.03
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
CVE-2016-5565HigOct 25, 2016
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.50cvss 7.7epss 0.01
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.
CVE-2016-5564HigOct 25, 2016
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.48cvss 7.4epss 0.01
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…
CVE-2016-5563HigOct 25, 2016
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.51cvss 7.9epss 0.01
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators to affect confidentiality, integrity, and availability via vectors related to…
CVE-2016-5562HigOct 25, 2016
Oracle Corporation
Iprocurement
risk 0.49cvss 7.6epss 0.01
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2016-5558HigOct 25, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.03
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…
CVE-2016-5557HigOct 25, 2016
Oracle Corporation
Advanced Pricing
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5544HigOct 25, 2016
Oracle Corporation
Solaris
risk 0.51cvss 7.8epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.
CVE-2016-5539HigOct 25, 2016
Oracle Corporation
Retail Applications
risk 0.47cvss 7.3epss 0.01
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5536HigOct 25, 2016
Oracle Corporation
Platform Security For Java
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…
CVE-2016-5526HigOct 25, 2016
Oracle Corporation
Agile Plm
risk 0.48cvss 7.3epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.
CVE-2016-5523HigOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.57cvss 8.8epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.
CVE-2016-5519HigOct 25, 2016
Oracle Corporation
Glassfish Server
risk 0.57cvss 8.8epss 0.02
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.
CVE-2016-5518HigOct 25, 2016
Oracle Corporation
Agile Engineering Data Management
risk 0.53cvss 8.1epss 0.02
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5515HigOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.57cvss 8.8epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.