CVEs

398,068 total · page 6453 of 7,962

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-1036	Adobe Inc. Analytics Appmeasurement For Flash Library	Med	0.40	6.1	0.02	Apr 22, 2016	Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-8823	Adobe Inc. Air	Hig	0.58	8.8	0.06	Apr 22, 2016	Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &…
CVE-2016-4065	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Apr 22, 2016	The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.
CVE-2016-4064	Foxitsoftware Reader	Hig	0.51	7.8	0.04	Apr 22, 2016	Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.
CVE-2016-4063	Foxitsoftware Reader	Hig	0.51	7.8	0.05	Apr 22, 2016	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.
CVE-2016-4062	Foxitsoftware Reader	Med	0.36	5.5	0.01	Apr 22, 2016	Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.
CVE-2016-4061	Foxitsoftware Reader	Hig	0.49	7.5	0.01	Apr 22, 2016	Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.
CVE-2016-4060	Foxitsoftware Reader	Hig	0.49	7.5	0.01	Apr 22, 2016	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2016-4059	Foxitsoftware Reader	Hig	0.51	7.8	0.04	Apr 22, 2016	Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.
CVE-2016-1596	Novell Service Desk	Med	0.38	5.4	0.02	Apr 22, 2016	Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent,…
CVE-2016-1595	Novell Service Desk	Med	0.46	6.5	0.07	Apr 22, 2016	LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter.
CVE-2016-1594	Novell Service Desk	Med	0.46	6.5	0.07	Apr 22, 2016	Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.
CVE-2016-1593	Novell Service Desk	Hig	0.55	7.2	0.64	Apr 22, 2016	Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a…
CVE-2016-3145	Lexmark Printer Firmware	Med	0.30	4.6	0.00	Apr 22, 2016	Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read…
CVE-2016-2354	Lemur Vehicle Monitors BlueDriver	Hig	0.57	8.8	0.01	Apr 22, 2016	The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a…
CVE-2016-2306	Ecava Integraxor	Hig	0.49	7.5	0.02	Apr 22, 2016	The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network.
CVE-2016-2305	Ecava Integraxor	Med	0.40	6.1	0.01	Apr 22, 2016	Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2016-2304	Ecava Integraxor	Med	0.28	4.3	0.01	Apr 22, 2016	Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVE-2016-2303	Ecava Integraxor	Med	0.35	5.3	0.01	Apr 22, 2016	CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
CVE-2016-2302	Ecava Integraxor	Med	0.35	5.3	0.01	Apr 22, 2016	Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages.
CVE-2016-2301	Ecava Integraxor	Med	0.41	6.3	0.01	Apr 22, 2016	SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-2300	Ecava Integraxor	Med	0.42	6.5	0.01	Apr 22, 2016	Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors.
CVE-2016-2299	Ecava Integraxor	Hig	0.48	7.3	0.01	Apr 22, 2016	SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-3977	Giflib Project Giflib	Med	0.36	5.5	0.02	Apr 21, 2016	Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
CVE-2016-3190	Cairographics Cairo	Hig	0.49	7.5	0.02	Apr 21, 2016	The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
CVE-2013-7449	Xchat Xchat	Med	0.35	6.5	0.01	Apr 21, 2016	The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid…
CVE-2016-3466	Oracle Corporation Field Service	Cri	0.59	9.1	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless.
CVE-2016-3465	Oracle Corporation Solaris	Med	0.36	5.5	0.00	Apr 21, 2016	Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.
CVE-2016-3464	Oracle Corporation Flexcube Direct Banking	Med	0.37	5.7	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts.
CVE-2016-3463	Oracle Corporation Flexcube Direct Banking	Med	0.40	6.1	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-3462	Oracle Corporation Solaris	Med	0.36	5.5	0.00	Apr 21, 2016	Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service.
CVE-2016-3461	Oracle Corporation Mysql Enterprise Monitor	Hig	0.47	7.2	0.02	Apr 21, 2016	Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity, and availability via vectors related to Monitoring: Server.
CVE-2016-3460	Oracle Corporation Peoplesoft Enterprise Human Capital Management Eperformance	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance.
CVE-2016-3457	Oracle Corporation Peoplesoft Enterprise Human Capital Management Eperformance	Med	0.30	4.6	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise HCM ePerformance component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security.
CVE-2016-3456	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Hig	0.53	8.2	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Dialog Box.
CVE-2016-3455	Oracle Corporation Outside In Technology	Hig	0.56	8.6	0.03	Apr 21, 2016	Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters.
CVE-2016-3454	Oracle Corporation Database Server	Cri	0.59	9.0	0.03	Apr 21, 2016	Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3449	Oracle Corporation Java Se	Hig	0.54	8.3	0.04	Apr 21, 2016	Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.
CVE-2016-3447	Oracle Corporation Applications Framework	Med	0.45	6.9	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.
CVE-2016-3443	Oracle Corporation Java Se	Cri	0.63	9.6	0.05	Apr 21, 2016	Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims…
CVE-2016-3442	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.
CVE-2016-3441	Oracle Corporation Solaris	Hig	0.51	7.8	0.00	Apr 21, 2016	Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem.
CVE-2016-3439	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page.
CVE-2016-3438	Oracle Corporation Configurator	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April…
CVE-2016-3437	Oracle Corporation Oracle CRM Wireless	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page.
CVE-2016-3436	Oracle Corporation Common Applications Calendar	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
CVE-2016-3435	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.31	4.7	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.
CVE-2016-3434	Oracle Corporation Application Object Library	Med	0.31	4.7	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout.
CVE-2016-3431	Oracle Corporation Agile Plm	Med	0.42	6.4	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-3429	Oracle Corporation Retail Xstore Point Of Service	Med	0.29	4.5	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.

CVE-2016-1036MedApr 22, 2016
Adobe Inc.
Analytics Appmeasurement For Flash Library
risk 0.40cvss 6.1epss 0.02
Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-8823HigApr 22, 2016
Adobe Inc.
Air
risk 0.58cvss 8.8epss 0.06
Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &…
CVE-2016-4065HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.
CVE-2016-4064HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.
CVE-2016-4063HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.05
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.
CVE-2016-4062MedApr 22, 2016
Foxitsoftware
Reader
risk 0.36cvss 5.5epss 0.01
Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.
CVE-2016-4061HigApr 22, 2016
Foxitsoftware
Reader
risk 0.49cvss 7.5epss 0.01
Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.
CVE-2016-4060HigApr 22, 2016
Foxitsoftware
Reader
risk 0.49cvss 7.5epss 0.01
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2016-4059HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.
CVE-2016-1596MedApr 22, 2016
Novell
Service Desk
risk 0.38cvss 5.4epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent,…
CVE-2016-1595MedApr 22, 2016
Novell
Service Desk
risk 0.46cvss 6.5epss 0.07
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter.
CVE-2016-1594MedApr 22, 2016
Novell
Service Desk
risk 0.46cvss 6.5epss 0.07
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.
CVE-2016-1593HigApr 22, 2016
Novell
Service Desk
risk 0.55cvss 7.2epss 0.64
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a…
CVE-2016-3145MedApr 22, 2016
Lexmark
Printer Firmware
risk 0.30cvss 4.6epss 0.00
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read…
CVE-2016-2354HigApr 22, 2016
Lemur Vehicle Monitors
BlueDriver
risk 0.57cvss 8.8epss 0.01
The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a…
CVE-2016-2306HigApr 22, 2016
Ecava
Integraxor
risk 0.49cvss 7.5epss 0.02
The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network.
CVE-2016-2305MedApr 22, 2016
Ecava
Integraxor
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2016-2304MedApr 22, 2016
Ecava
Integraxor
risk 0.28cvss 4.3epss 0.01
Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVE-2016-2303MedApr 22, 2016
Ecava
Integraxor
risk 0.35cvss 5.3epss 0.01
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
CVE-2016-2302MedApr 22, 2016
Ecava
Integraxor
risk 0.35cvss 5.3epss 0.01
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages.
CVE-2016-2301MedApr 22, 2016
Ecava
Integraxor
risk 0.41cvss 6.3epss 0.01
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-2300MedApr 22, 2016
Ecava
Integraxor
risk 0.42cvss 6.5epss 0.01
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors.
CVE-2016-2299HigApr 22, 2016
Ecava
Integraxor
risk 0.48cvss 7.3epss 0.01
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-3977MedApr 21, 2016
Giflib Project
Giflib
risk 0.36cvss 5.5epss 0.02
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
CVE-2016-3190HigApr 21, 2016
Cairographics
Cairo
risk 0.49cvss 7.5epss 0.02
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
CVE-2013-7449MedApr 21, 2016
Xchat
Xchat
risk 0.35cvss 6.5epss 0.01
The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid…
CVE-2016-3466CriApr 21, 2016
Oracle Corporation
Field Service
risk 0.59cvss 9.1epss 0.02
Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless.
CVE-2016-3465MedApr 21, 2016
Oracle Corporation
Solaris
risk 0.36cvss 5.5epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.
CVE-2016-3464MedApr 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.37cvss 5.7epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts.
CVE-2016-3463MedApr 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.40cvss 6.1epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVE-2016-3462MedApr 21, 2016
Oracle Corporation
Solaris
risk 0.36cvss 5.5epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service.
CVE-2016-3461HigApr 21, 2016
Oracle Corporation
Mysql Enterprise Monitor
risk 0.47cvss 7.2epss 0.02
Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity, and availability via vectors related to Monitoring: Server.
CVE-2016-3460MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Human Capital Management Eperformance
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance.
CVE-2016-3457MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Human Capital Management Eperformance
risk 0.30cvss 4.6epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM ePerformance component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security.
CVE-2016-3456HigApr 21, 2016
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.53cvss 8.2epss 0.01
Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Dialog Box.
CVE-2016-3455HigApr 21, 2016
Oracle Corporation
Outside In Technology
risk 0.56cvss 8.6epss 0.03
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters.
CVE-2016-3454CriApr 21, 2016
Oracle Corporation
Database Server
risk 0.59cvss 9.0epss 0.03
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3449HigApr 21, 2016
Oracle Corporation
Java Se
risk 0.54cvss 8.3epss 0.04
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.
CVE-2016-3447MedApr 21, 2016
Oracle Corporation
Applications Framework
risk 0.45cvss 6.9epss 0.01
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.
CVE-2016-3443CriApr 21, 2016
Oracle Corporation
Java Se
risk 0.63cvss 9.6epss 0.05
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims…
CVE-2016-3442MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.
CVE-2016-3441HigApr 21, 2016
Oracle Corporation
Solaris
risk 0.51cvss 7.8epss 0.00
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem.
CVE-2016-3439HigApr 21, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page.
CVE-2016-3438HigApr 21, 2016
Oracle Corporation
Configurator
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April…
CVE-2016-3437HigApr 21, 2016
Oracle Corporation
Oracle CRM Wireless
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page.
CVE-2016-3436HigApr 21, 2016
Oracle Corporation
Common Applications Calendar
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
CVE-2016-3435MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.31cvss 4.7epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.
CVE-2016-3434MedApr 21, 2016
Oracle Corporation
Application Object Library
risk 0.31cvss 4.7epss 0.01
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout.
CVE-2016-3431MedApr 21, 2016
Oracle Corporation
Agile Plm
risk 0.42cvss 6.4epss 0.01
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than…
CVE-2016-3429MedApr 21, 2016
Oracle Corporation
Retail Xstore Point Of Service
risk 0.29cvss 4.5epss 0.01
Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.