VYPR

CVEs

112,892 total · page 2197 of 2,258

AllCriticalHighKEV
  • CVE-2016-5574HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.02

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5573HigOct 25, 2016
    Oracle Corporation
    Java SE Embedded
    risk 0.54cvss 8.3epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.

  • CVE-2016-5565HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.50cvss 7.7epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.

  • CVE-2016-5564HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.48cvss 7.4epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related…

  • CVE-2016-5563HigOct 25, 2016
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.51cvss 7.9epss 0.01

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators to affect confidentiality, integrity, and availability via vectors related to…

  • CVE-2016-5562HigOct 25, 2016
    Oracle Corporation
    Iprocurement
    risk 0.49cvss 7.6epss 0.01

    Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5558HigOct 25, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.56cvss 8.6epss 0.03

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability…

  • CVE-2016-5557HigOct 25, 2016
    Oracle Corporation
    Advanced Pricing
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5544HigOct 25, 2016
    Oracle Corporation
    Solaris
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.

  • CVE-2016-5539HigOct 25, 2016
    Oracle Corporation
    Retail Applications
    risk 0.47cvss 7.3epss 0.01

    Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2016-5536HigOct 25, 2016
    Oracle Corporation
    Platform Security For Java
    risk 0.50cvss 7.6epss 0.02

    Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-5526HigOct 25, 2016
    Oracle Corporation
    Agile Plm
    risk 0.48cvss 7.3epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Apache Tomcat.

  • CVE-2016-5523HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.

  • CVE-2016-5519HigOct 25, 2016
    Oracle Corporation
    Glassfish Server
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.

  • CVE-2016-5518HigOct 25, 2016
    Oracle Corporation
    Agile Engineering Data Management
    risk 0.53cvss 8.1epss 0.02

    Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.

  • CVE-2016-5515HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.

  • CVE-2016-5514HigOct 25, 2016
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.57cvss 8.8epss 0.02

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet.

  • CVE-2016-5503HigOct 25, 2016
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.53cvss 8.2epss 0.00

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.

  • CVE-2016-5501HigOct 25, 2016
    Oracle Corporation
    VM Virtualbox
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.

  • CVE-2016-5500HigOct 25, 2016
    Oracle Corporation
    Discoverer
    risk 0.49cvss 7.5epss 0.02

    Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer.

  • CVE-2016-5495HigOct 25, 2016
    Oracle Corporation
    Discoverer
    risk 0.49cvss 7.5epss 0.02

    Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema.

  • CVE-2016-5492HigOct 25, 2016
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.46cvss 7.1epss 0.00

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.

  • CVE-2016-5491HigOct 25, 2016
    Oracle Corporation
    Commerce Service Center
    risk 0.53cvss 8.2epss 0.01

    Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5489HigOct 25, 2016
    Oracle Corporation
    Istore
    risk 0.53cvss 8.2epss 0.02

    Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.

  • CVE-2016-5482HigOct 25, 2016
    Oracle Corporation
    Commerce Guided Search
    risk 0.53cvss 8.2epss 0.01

    Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-3505HigOct 25, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.58cvss 8.8epss 0.06

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.

  • CVE-2016-3473HigOct 25, 2016
    Oracle Corporation
    Fusion Middleware
    risk 0.54cvss 7.7epss 0.14

    Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2016-1000215HigOct 25, 2016
    Ruckus
    Wireless H500
    risk 0.49cvss 7.5epss 0.01

    Ruckus Wireless H500 web management interface denial of service

  • CVE-2016-1000213HigOct 25, 2016
    Ruckus
    Wireless H500
    risk 0.57cvss 8.8epss 0.00

    Ruckus Wireless H500 web management interface CSRF

  • CVE-2016-1000032HigOct 25, 2016
    TGCaptcha2
    TGCaptcha2
    risk 0.49cvss 7.5epss 0.01

    TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times.

  • CVE-2016-0328HigOct 22, 2016
    IBM
    Security Guardium Database Activity Monitor
    risk 0.51cvss 7.8epss 0.00

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors.

  • CVE-2016-0326HigOct 22, 2016
    IBM
    Rational Quality Manager
    risk 0.57cvss 8.8epss 0.01

    IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."

  • CVE-2016-0247HigOct 22, 2016
    IBM
    Security Guardium
    risk 0.51cvss 7.8epss 0.00

    IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information.

  • CVE-2016-0241HigOct 22, 2016
    IBM
    Security Guardium Database Activity Monitor
    risk 0.57cvss 8.8epss 0.02

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.

  • CVE-2016-0239HigOct 22, 2016
    IBM
    Security Guardium Database Activity Monitor
    risk 0.57cvss 8.8epss 0.01

    IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.

  • CVE-2016-0236HigOct 21, 2016
    IBM
    Security Guardium Database Activity Monitor
    risk 0.57cvss 8.8epss 0.03

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.

  • CVE-2016-1000119HigOct 21, 2016
    Huge It
    Catalog
    risk 0.47cvss 7.2epss 0.02

    SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

  • CVE-2016-1000118HigOct 21, 2016
    Huge It
    Slideshow
    risk 0.47cvss 7.2epss 0.02

    XSS & SQLi in HugeIT slideshow v1.0.4

  • CVE-2016-1000117HigOct 21, 2016
    Huge It
    Slideshow
    risk 0.47cvss 7.2epss 0.02

    XSS & SQLi in HugeIT slideshow v1.0.4

  • CVE-2016-1000116HigOct 21, 2016
    Huge It
    Portfolio Gallery Manager
    risk 0.47cvss 7.2epss 0.02

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • CVE-2016-1000115HigOct 21, 2016
    Huge It
    Portfolio Gallery Manager
    risk 0.47cvss 7.2epss 0.03

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • CVE-2016-2848HigOct 21, 2016
    Isc
    Bind
    risk 0.51cvss 7.5epss 0.26

    ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.

  • CVE-2016-8666HigOct 16, 2016
    Linux
    Kernel
    risk 0.49cvss 7.5epss 0.05

    The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4…

  • CVE-2016-7425HigOct 16, 2016
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.00

    The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an…

  • CVE-2016-7039HigOct 16, 2016
    Linux
    Kernel
    risk 0.49cvss 7.5epss 0.08

    The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only…

  • CVE-2016-0249HigOct 16, 2016
    IBM
    Security Guardium
    risk 0.56cvss 8.6epss 0.01

    SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2015-3288HigOct 16, 2016
    Linux
    Kernel
    risk 0.44cvss 7.8epss 0.00

    mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.

  • CVE-2016-7211HigOct 14, 2016
    Microsoft
    Windows
    risk 0.48cvss 7.3epss 0.03

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…

  • CVE-2016-7194HigOct 14, 2016
    Microsoft
    Edge
    risk 0.56cvss 7.5epss 0.58

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386,…

  • CVE-2016-7193HigKEVOct 14, 2016
    Microsoft
    Word
    risk 0.67cvss 7.8epss 0.58

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,…