CVEs

100,082 total · page 1956 of 2,002

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-3578	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3577	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3576	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3575	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3574	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.04	Jul 21, 2016	Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3565	Oracle Corporation Retail Order Broker	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 5.1 and 5.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to System Administration.
CVE-2016-3564	Oracle Corporation TopLink	Hig	0.53	8.1	0.05	Jul 21, 2016	Unspecified vulnerability in the Oracle TopLink component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JPA-RS.
CVE-2016-3561	Oracle Corporation Agile Plm	Hig	0.48	7.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SDK.
CVE-2016-3554	Oracle Corporation Agile Plm	Hig	0.58	8.8	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design.
CVE-2016-3552	Sun Corporation Java SE	Hig	0.53	8.1	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-3544	Oracle Corporation Business Intelligence	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-3539	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.
CVE-2016-3538	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.
CVE-2016-3536	Oracle Corporation Marketing	Hig	0.53	8.2	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables. NOTE: the previous information is from the July 2016 CPU. Oracle…
CVE-2016-3535	Oracle Corporation CRM Technical Foundation	Hig	0.54	8.2	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch. NOTE: the previous information is from the July 2016 CPU. Oracle has…
CVE-2016-3532	Oracle Corporation Advanced Inbound Telephony	Hig	0.54	8.2	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is…
CVE-2016-3530	Oracle Corporation Agile Plm	Hig	0.46	7.1	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.
CVE-2016-3528	Oracle Corporation Internet Expenses	Hig	0.49	7.5	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect availability via vectors related to Expenses Admin Utilities.
CVE-2016-3526	Oracle Corporation Agile Plm	Hig	0.49	7.5	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3529 and CVE-2016-3560.
CVE-2016-3522	Oracle Corporation Web Applications Desktop Integrator	Hig	0.54	8.2	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Application Service.
CVE-2016-3515	Oracle Corporation Enterprise Communications Broker	Hig	0.49	7.5	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-3512	Oracle Corporation Customer Interaction History	Hig	0.54	8.2	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.
CVE-2016-3511	Sun Corporation Java SE	Hig	0.50	7.7	0.01	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
CVE-2016-3506	Oracle Corporation JDBC	Hig	0.53	8.1	0.04	Jul 21, 2016	Unspecified vulnerability in the JDBC component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2; the Oracle Retail Xstore Point of Service 5.5, 6.0, 6.5, 7.0, 7.1, 15.0, and 16.0; the Oracle Retail Warehouse Management System 14.04, 14.1.3, and 15.0.1; the Oracle…
CVE-2016-3503	Sun Corporation Java SE	Hig	0.50	7.7	0.01	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-3491	Oracle Corporation CRM Technical Foundation	Hig	0.54	8.2	0.03	Jul 21, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU.…
CVE-2016-3487	Oracle Corporation Webcenter Sites	Hig	0.53	8.1	0.05	Jul 21, 2016	Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3483	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.03	Jul 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and availability via vectors related to File Processing.
CVE-2016-3481	Oracle Corporation Sun Systems Products Suite	Hig	0.50	7.7	0.03	Jul 21, 2016	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related to Web.
CVE-2016-3479	Oracle Corporation Portable Clusterware	Hig	0.49	7.5	0.04	Jul 21, 2016	Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.
CVE-2016-3477	MariaDB MariaDB	Hig	0.53	8.1	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to…
CVE-2016-3471	MariaDB MariaDB	Hig	0.49	7.5	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
CVE-2016-3470	Oracle Corporation Transportation Management	Hig	0.46	7.1	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.
CVE-2016-3446	Oracle Corporation Business Intelligence	Hig	0.54	8.3	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.
CVE-2016-3440	Oracle Corporation MySQL	Hig	0.50	7.7	0.03	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVE-2016-0635	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.58	8.8	0.05	Jul 21, 2016	Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the…
CVE-2016-5654	Misys Fusioncapital Opics Plus	Hig	0.49	7.5	0.02	Jul 19, 2016	Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.
CVE-2015-8947	Harfbuzz Project Harfbuzz	Hig	0.43	7.6	0.02	Jul 19, 2016	hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
CVE-2016-5388	Apache Tomcat	Hig	0.50	8.1	0.51	Jul 19, 2016	Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote…
CVE-2016-5387	Apache HTTP Server	Hig	0.57	8.1	0.56	Jul 19, 2016	The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP…
CVE-2016-5386	Go net/http	Hig	0.53	8.1	0.05	Jul 19, 2016	The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to…
CVE-2016-5385	PHP PHP	Hig	0.57	8.1	0.50	Jul 19, 2016	PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an…
CVE-2016-3039	IBM Traveler	Hig	0.53	8.1	0.02	Jul 17, 2016	IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity…
CVE-2016-1448	Cisco Systems, Inc. Webex Meetings Server	Hig	0.57	8.8	0.01	Jul 17, 2016	Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706.
CVE-2016-5661	Accela Civic Platform Citizen Access	Hig	0.57	8.8	0.03	Jul 15, 2016	Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
CVE-2016-5637	Libbpg Project Libbpg	Hig	0.57	8.8	0.03	Jul 15, 2016	The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion"…
CVE-2016-0340	IBM Security Identity Manager Adapter	Hig	0.48	7.4	0.01	Jul 15, 2016	IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
CVE-2016-0330	IBM Security Identity Manager Adapter	Hig	0.48	7.3	0.01	Jul 15, 2016	IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.
CVE-2015-1977	IBM Tivoli Directory Server	Hig	0.49	7.5	0.02	Jul 15, 2016	Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before…
CVE-2016-5807	Enghousenetworks LightHouse SMS	Hig	0.53	8.1	0.01	Jul 15, 2016	Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request.

CVE-2016-3578HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3577HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3576HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3575HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3574HigJul 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.04
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than…
CVE-2016-3565HigJul 21, 2016
Oracle Corporation
Retail Order Broker
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 5.1 and 5.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to System Administration.
CVE-2016-3564HigJul 21, 2016
Oracle Corporation
TopLink
risk 0.53cvss 8.1epss 0.05
Unspecified vulnerability in the Oracle TopLink component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JPA-RS.
CVE-2016-3561HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.48cvss 7.3epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SDK.
CVE-2016-3554HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.58cvss 8.8epss 0.04
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design.
CVE-2016-3552HigJul 21, 2016
Sun Corporation
Java SE
risk 0.53cvss 8.1epss 0.00
Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-3544HigJul 21, 2016
Oracle Corporation
Business Intelligence
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-3539HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538.
CVE-2016-3538HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539.
CVE-2016-3536HigJul 21, 2016
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables. NOTE: the previous information is from the July 2016 CPU. Oracle…
CVE-2016-3535HigJul 21, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.54cvss 8.2epss 0.03
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch. NOTE: the previous information is from the July 2016 CPU. Oracle has…
CVE-2016-3532HigJul 21, 2016
Oracle Corporation
Advanced Inbound Telephony
risk 0.54cvss 8.2epss 0.03
Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is…
CVE-2016-3530HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.46cvss 7.1epss 0.03
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to PGC / Import.
CVE-2016-3528HigJul 21, 2016
Oracle Corporation
Internet Expenses
risk 0.49cvss 7.5epss 0.04
Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect availability via vectors related to Expenses Admin Utilities.
CVE-2016-3526HigJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.49cvss 7.5epss 0.04
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3529 and CVE-2016-3560.
CVE-2016-3522HigJul 21, 2016
Oracle Corporation
Web Applications Desktop Integrator
risk 0.54cvss 8.2epss 0.03
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Application Service.
CVE-2016-3515HigJul 21, 2016
Oracle Corporation
Enterprise Communications Broker
risk 0.49cvss 7.5epss 0.04
Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-3512HigJul 21, 2016
Oracle Corporation
Customer Interaction History
risk 0.54cvss 8.2epss 0.03
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.
CVE-2016-3511HigJul 21, 2016
Sun Corporation
Java SE
risk 0.50cvss 7.7epss 0.01
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
CVE-2016-3506HigJul 21, 2016
Oracle Corporation
JDBC
risk 0.53cvss 8.1epss 0.04
Unspecified vulnerability in the JDBC component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2; the Oracle Retail Xstore Point of Service 5.5, 6.0, 6.5, 7.0, 7.1, 15.0, and 16.0; the Oracle Retail Warehouse Management System 14.04, 14.1.3, and 15.0.1; the Oracle…
CVE-2016-3503HigJul 21, 2016
Sun Corporation
Java SE
risk 0.50cvss 7.7epss 0.01
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-3491HigJul 21, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.54cvss 8.2epss 0.03
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU.…
CVE-2016-3487HigJul 21, 2016
Oracle Corporation
Webcenter Sites
risk 0.53cvss 8.1epss 0.05
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3483HigJul 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.03
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and availability via vectors related to File Processing.
CVE-2016-3481HigJul 21, 2016
Oracle Corporation
Sun Systems Products Suite
risk 0.50cvss 7.7epss 0.03
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related to Web.
CVE-2016-3479HigJul 21, 2016
Oracle Corporation
Portable Clusterware
risk 0.49cvss 7.5epss 0.04
Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.
CVE-2016-3477HigJul 21, 2016
MariaDB
MariaDB
risk 0.53cvss 8.1epss 0.00
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to…
CVE-2016-3471HigJul 21, 2016
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.00
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
CVE-2016-3470HigJul 21, 2016
Oracle Corporation
Transportation Management
risk 0.46cvss 7.1epss 0.02
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.
CVE-2016-3446HigJul 21, 2016
Oracle Corporation
Business Intelligence
risk 0.54cvss 8.3epss 0.02
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.
CVE-2016-3440HigJul 21, 2016
Oracle Corporation
MySQL
risk 0.50cvss 7.7epss 0.03
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVE-2016-0635HigJul 21, 2016
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.58cvss 8.8epss 0.05
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the…
CVE-2016-5654HigJul 19, 2016
Misys
Fusioncapital Opics Plus
risk 0.49cvss 7.5epss 0.02
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.
CVE-2015-8947HigJul 19, 2016
Harfbuzz Project
Harfbuzz
risk 0.43cvss 7.6epss 0.02
hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
CVE-2016-5388HigJul 19, 2016
Apache
Tomcat
risk 0.50cvss 8.1epss 0.51
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote…
CVE-2016-5387HigJul 19, 2016
Apache
HTTP Server
risk 0.57cvss 8.1epss 0.56
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP…
CVE-2016-5386HigJul 19, 2016
Go
net/http
risk 0.53cvss 8.1epss 0.05
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to…
CVE-2016-5385HigJul 19, 2016
PHP
PHP
risk 0.57cvss 8.1epss 0.50
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an…
CVE-2016-3039HigJul 17, 2016
IBM
Traveler
risk 0.53cvss 8.1epss 0.02
IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity…
CVE-2016-1448HigJul 17, 2016
Cisco Systems, Inc.
Webex Meetings Server
risk 0.57cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706.
CVE-2016-5661HigJul 15, 2016
Accela
Civic Platform Citizen Access
risk 0.57cvss 8.8epss 0.03
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
CVE-2016-5637HigJul 15, 2016
Libbpg Project
Libbpg
risk 0.57cvss 8.8epss 0.03
The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion"…
CVE-2016-0340HigJul 15, 2016
IBM
Security Identity Manager Adapter
risk 0.48cvss 7.4epss 0.01
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
CVE-2016-0330HigJul 15, 2016
IBM
Security Identity Manager Adapter
risk 0.48cvss 7.3epss 0.01
IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.
CVE-2015-1977HigJul 15, 2016
IBM
Tivoli Directory Server
risk 0.49cvss 7.5epss 0.02
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before…
CVE-2016-5807HigJul 15, 2016
Enghousenetworks
LightHouse SMS
risk 0.53cvss 8.1epss 0.01
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request.