VYPR

CVEs

105,912 total · page 2057 of 2,119

AllCriticalHighKEV
  • CVE-2016-8503HigOct 26, 2016
    Yandex
    Yandex.browser
    risk 0.48cvss 7.3epss 0.01

    Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

  • CVE-2016-8502HigOct 26, 2016
    Yandex
    Yandex.browser
    risk 0.48cvss 7.3epss 0.01

    Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

  • CVE-2016-8296HigOct 25, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.50cvss 7.6epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP.

  • CVE-2016-8293HigOct 25, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and…

  • CVE-2016-8291HigOct 25, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform.

  • CVE-2016-8281HigOct 25, 2016
    Oracle Corporation
    Platform Security For Java
    risk 0.50cvss 7.6epss 0.02

    Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-5625HigOct 25, 2016
    Oracle Corporation
    MySQL
    risk 0.46cvss 7.0epss 0.00

    Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.

  • CVE-2016-5619HigOct 25, 2016
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.53cvss 8.1epss 0.02

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to…

  • CVE-2016-5607HigOct 25, 2016
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors…

  • CVE-2016-5595HigOct 25, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.

  • CVE-2016-5593HigOct 25, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…

  • CVE-2016-5592HigOct 25, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.

  • CVE-2016-5591HigOct 25, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…

  • CVE-2016-5589HigOct 25, 2016
    Oracle Corporation
    CRM Technical Foundation
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5588HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5587HigOct 25, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…

  • CVE-2016-5586HigOct 25, 2016
    Oracle Corporation
    Email Center
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5579HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5578HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5577HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5574HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5573HigOct 25, 2016
    Oracle Corporation
    Java SE Embedded
    risk 0.54cvss 8.3epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.

  • CVE-2016-5565HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.50cvss 7.7epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.

  • CVE-2016-5564HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.48cvss 7.4epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…

  • CVE-2016-5563HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.51cvss 7.9epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators to affect confidentiality, integrity, and availability via vectors related to…

  • CVE-2016-5562HigOct 25, 2016
    Oracle Corporation
    Iprocurement
    risk 0.49cvss 7.6epss 0.01

    Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5558HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.03

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5557HigOct 25, 2016
    Oracle Corporation
    Advanced Pricing
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5544HigOct 25, 2016
    Oracle Corporation
    Solaris
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.

  • CVE-2016-5539HigOct 25, 2016
    Oracle Corporation
    Retail Applications
    risk 0.47cvss 7.3epss 0.01

    Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2016-5536HigOct 25, 2016
    Oracle Corporation
    Platform Security For Java
    risk 0.50cvss 7.6epss 0.02

    Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-5526HigOct 25, 2016
    Oracle Corporation
    Agile Plm
    risk 0.48cvss 7.3epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.

  • CVE-2016-5523HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.

  • CVE-2016-5519HigOct 25, 2016
    Oracle Corporation
    Glassfish Server
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.

  • CVE-2016-5518HigOct 25, 2016
    Oracle Corporation
    Agile Engineering Data Management
    risk 0.53cvss 8.1epss 0.02

    Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.

  • CVE-2016-5515HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.

  • CVE-2016-5514HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet.

  • CVE-2016-5503HigOct 25, 2016
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.53cvss 8.2epss 0.00

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.

  • CVE-2016-5501HigOct 25, 2016
    Oracle Corporation
    VM Virtualbox
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.

  • CVE-2016-5500HigOct 25, 2016
    Oracle Corporation
    Discoverer
    risk 0.49cvss 7.5epss 0.02

    Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer.

  • CVE-2016-5495HigOct 25, 2016
    Oracle Corporation
    Discoverer
    risk 0.49cvss 7.5epss 0.02

    Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema.

  • CVE-2016-5492HigOct 25, 2016
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.46cvss 7.1epss 0.00

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.

  • CVE-2016-5491HigOct 25, 2016
    Oracle Corporation
    Commerce Service Center
    risk 0.53cvss 8.2epss 0.01

    Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5489HigOct 25, 2016
    Oracle Corporation
    Istore
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.

  • CVE-2016-5482HigOct 25, 2016
    Oracle Corporation
    Commerce Guided Search
    risk 0.53cvss 8.2epss 0.01

    Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-3505HigOct 25, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.58cvss 8.8epss 0.06

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.

  • CVE-2016-3473HigOct 25, 2016
    Oracle Corporation
    Fusion Middleware
    risk 0.54cvss 7.7epss 0.14

    Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2016-1000215HigOct 25, 2016
    Ruckus
    Wireless H500
    risk 0.49cvss 7.5epss 0.01

    Ruckus Wireless H500 web management interface denial of service

  • CVE-2016-1000213HigOct 25, 2016
    Ruckus
    Wireless H500
    risk 0.57cvss 8.8epss 0.00

    Ruckus Wireless H500 web management interface CSRF

  • CVE-2016-1000032HigOct 25, 2016
    TGCaptcha2
    TGCaptcha2
    risk 0.49cvss 7.5epss 0.01

    TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times.