CVEs

128,449 total · page 2491 of 2,569

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-3332	Oracle Corporation VM Virtualbox	Hig	0.55	8.4	0.00	Jan 27, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3330	Oracle Corporation Siebel UI Framework	Hig	0.49	7.6	0.01	Jan 27, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3328	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3327	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3326	Oracle Corporation Common Applications	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-3325	Oracle Corporation Siebel UI Framework	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3316	Oracle Corporation VM Virtualbox	Hig	0.58	8.4	0.07	Jan 27, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2017-3303	Oracle Corporation XML Gateway	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3295	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3294	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3293	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3290	Oracle Corporation VM Virtualbox	Hig	0.51	7.9	0.00	Jan 27, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-3287	Oracle Corporation Istore	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3285	Oracle Corporation Service Fulfillment Manager	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3284	Oracle Corporation Service Fulfillment Manager	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3279	Oracle Corporation Leads Management	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3278	Oracle Corporation One To One Fulfillment	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3275	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3274	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3271	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.02	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3270	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3269	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3268	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3267	Oracle Corporation Outside In Technology	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3263	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low…
CVE-2017-3260	Sun Corporation Java SE	Hig	0.54	8.3	0.02	Jan 27, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-3253	Sun Corporation Java SE	Hig	0.49	7.5	0.04	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3250	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.01	Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3249	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.01	Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to…
CVE-2016-9795	Ca Universal Job Management Agent	Hig	0.51	7.8	0.01	Jan 27, 2017	The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers…
CVE-2016-8315	Oracle Corporation Flexcube Investor Servicing	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low…
CVE-2016-8312	Oracle Corporation Flexcube Private Banking	Hig	0.53	8.2	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8310	Oracle Corporation Flexcube Universal Banking	Hig	0.48	7.3	0.02	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8298	Oracle Corporation Flexcube Private Banking	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8297	Oracle Corporation Flexcube Universal Banking	Hig	0.53	8.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-6264	Uclibc Ng Uclibc	Hig	0.49	7.5	0.03	Jan 27, 2017	Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.
CVE-2016-5827	Libical Project Libical	Hig	0.49	7.5	0.03	Jan 27, 2017	The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
CVE-2016-5826	Libical Project Libical	Hig	0.49	7.5	0.03	Jan 27, 2017	The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.
CVE-2016-5590	Oracle Corporation Mysql Enterprise Monitor	Hig	0.47	7.2	0.02	Jan 27, 2017	Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Agent). Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise…
CVE-2016-5546	Oracle Corporation Jrockit	Hig	0.49	7.5	0.03	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows…
CVE-2016-5822	Huawei Oceanstor 5800 V3 Firmware	Hig	0.49	7.5	0.02	Jan 27, 2017	Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) via a large number of crafted HTTP packets.
CVE-2016-9453	LibTIFF Libtiff	Hig	0.51	7.8	0.03	Jan 27, 2017	The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
CVE-2016-9448	LibTIFF Libtiff	Hig	0.49	7.5	0.05	Jan 27, 2017	The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists…
CVE-2016-10003	Squid Cache Squid	Hig	0.42	7.5	0.05	Jan 27, 2017	Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
CVE-2016-10002	Squid Cache Squid	Hig	0.49	7.5	0.07	Jan 27, 2017	Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted…
CVE-2017-5598	Eclinicalworks healow@work	Hig	0.49	7.5	0.01	Jan 27, 2017	An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server,…
CVE-2016-9050	Aerospike Database Server	Hig	0.54	8.2	0.03	Jan 26, 2017	An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can…
CVE-2016-8710	Libbpg libbpg	Hig	0.51	7.8	0.03	Jan 26, 2017	An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This…
CVE-2016-8227	Lenovo Transition	Hig	0.51	7.8	0.00	Jan 26, 2017	Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges.
CVE-2016-8225	Lenovo Edge and Lenovo Slim USB Keyboard Driver	Hig	0.51	7.8	0.00	Jan 26, 2017	Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.

CVE-2017-3332HigJan 27, 2017
Oracle Corporation
VM Virtualbox
risk 0.55cvss 8.4epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3330HigJan 27, 2017
Oracle Corporation
Siebel UI Framework
risk 0.49cvss 7.6epss 0.01
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3328HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3327HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3326HigJan 27, 2017
Oracle Corporation
Common Applications
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-3325HigJan 27, 2017
Oracle Corporation
Siebel UI Framework
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-3316HigJan 27, 2017
Oracle Corporation
VM Virtualbox
risk 0.58cvss 8.4epss 0.07
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2017-3303HigJan 27, 2017
Oracle Corporation
XML Gateway
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3295HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3294HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3293HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3290HigJan 27, 2017
Oracle Corporation
VM Virtualbox
risk 0.51cvss 7.9epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-3287HigJan 27, 2017
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3285HigJan 27, 2017
Oracle Corporation
Service Fulfillment Manager
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3284HigJan 27, 2017
Oracle Corporation
Service Fulfillment Manager
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-3279HigJan 27, 2017
Oracle Corporation
Leads Management
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3278HigJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3275HigJan 27, 2017
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3274HigJan 27, 2017
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3271HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3270HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3269HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3268HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3267HigJan 27, 2017
Oracle Corporation
Outside In Technology
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3263HigJan 27, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low…
CVE-2017-3260HigJan 27, 2017
Sun Corporation
Java SE
risk 0.54cvss 8.3epss 0.02
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-3253HigJan 27, 2017
Sun Corporation
Java SE
risk 0.49cvss 7.5epss 0.04
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-3250HigJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-3249HigJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to…
CVE-2016-9795HigJan 27, 2017
Ca
Universal Job Management Agent
risk 0.51cvss 7.8epss 0.01
The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers…
CVE-2016-8315HigJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low…
CVE-2016-8312HigJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-8310HigJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows…
CVE-2016-8298HigJan 27, 2017
Oracle Corporation
Flexcube Private Banking
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8297HigJan 27, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low…
CVE-2016-6264HigJan 27, 2017
Uclibc Ng
Uclibc
risk 0.49cvss 7.5epss 0.03
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.
CVE-2016-5827HigJan 27, 2017
Libical Project
Libical
risk 0.49cvss 7.5epss 0.03
The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
CVE-2016-5826HigJan 27, 2017
Libical Project
Libical
risk 0.49cvss 7.5epss 0.03
The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.
CVE-2016-5590HigJan 27, 2017
Oracle Corporation
Mysql Enterprise Monitor
risk 0.47cvss 7.2epss 0.02
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Agent). Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise…
CVE-2016-5546HigJan 27, 2017
Oracle Corporation
Jrockit
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows…
CVE-2016-5822HigJan 27, 2017
Huawei
Oceanstor 5800 V3 Firmware
risk 0.49cvss 7.5epss 0.02
Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) via a large number of crafted HTTP packets.
CVE-2016-9453HigJan 27, 2017
LibTIFF
Libtiff
risk 0.51cvss 7.8epss 0.03
The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
CVE-2016-9448HigJan 27, 2017
LibTIFF
Libtiff
risk 0.49cvss 7.5epss 0.05
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists…
CVE-2016-10003HigJan 27, 2017
Squid Cache
Squid
risk 0.42cvss 7.5epss 0.05
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
CVE-2016-10002HigJan 27, 2017
Squid Cache
Squid
risk 0.49cvss 7.5epss 0.07
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted…
CVE-2017-5598HigJan 27, 2017
Eclinicalworks
healow@work
risk 0.49cvss 7.5epss 0.01
An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server,…
CVE-2016-9050HigJan 26, 2017
Aerospike
Database Server
risk 0.54cvss 8.2epss 0.03
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can…
CVE-2016-8710HigJan 26, 2017
Libbpg
libbpg
risk 0.51cvss 7.8epss 0.03
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This…
CVE-2016-8227HigJan 26, 2017
Lenovo
Transition
risk 0.51cvss 7.8epss 0.00
Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges.
CVE-2016-8225HigJan 26, 2017
Lenovo
Edge and Lenovo Slim USB Keyboard Driver
risk 0.51cvss 7.8epss 0.00
Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.