VYPR

CVEs

398,057 total · page 6454 of 7,962

AllCriticalHighKEV
  • CVE-2016-3416MedApr 21, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.02

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.

  • CVE-2016-2294HigApr 21, 2016
    Accuenergy
    Acuvim Iir Net Firmware
    risk 0.49cvss 7.5epss 0.02

    The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors.

  • CVE-2016-2293HigApr 21, 2016
    Accuenergy
    Acuvim Iir Net Firmware
    risk 0.56cvss 8.6epss 0.02

    The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL.

  • CVE-2016-2280HigApr 21, 2016
    Honeywell
    Uniformance Process History Database
    risk 0.49cvss 7.5epss 0.02

    Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors.

  • CVE-2016-2008CriApr 21, 2016
    Hewlett Packard Enterprise (HPE)
    Data Protector
    risk 0.65cvss 9.8epss 0.10

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2016-2007CriApr 21, 2016
    HPE
    Data Protector
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.

  • CVE-2016-2006CriApr 21, 2016
    HPE
    Data Protector
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.

  • CVE-2016-2005CriApr 21, 2016
    HPE
    Data Protector
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.

  • CVE-2016-2004CriApr 21, 2016
    HPE
    Data Protector
    risk 0.74cvss 9.8epss 0.94

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

  • CVE-2016-1367HigApr 21, 2016
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.49cvss 7.5epss 0.02

    The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248.

  • CVE-2016-1364HigApr 21, 2016
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.49cvss 7.5epss 0.02

    Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.

  • CVE-2016-1363CriApr 21, 2016
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.64cvss 9.8epss 0.06

    Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.

  • CVE-2016-1362HigApr 21, 2016
    Cisco Systems, Inc.
    Aireos
    risk 0.49cvss 7.5epss 0.02

    Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747.

  • CVE-2016-0700MedApr 21, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.02

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.

  • CVE-2016-0699CriApr 21, 2016
    Oracle Corporation
    Flexcube Direct Banking
    risk 0.59cvss 9.1epss 0.03

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component.

  • CVE-2016-0698MedApr 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than…

  • CVE-2016-0697MedApr 21, 2016
    Oracle Corporation
    Application Object Library
    risk 0.39cvss 6.0epss 0.01

    Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-0696MedApr 21, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.35cvss 5.4epss 0.02

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.

  • CVE-2016-0695MedApr 21, 2016
    Oracle Corporation
    Jrockit
    risk 0.39cvss 5.9epss 0.03

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.

  • CVE-2016-0694HigApr 21, 2016
    Oracle Corporation
    Berkeley Db
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-0693CriApr 21, 2016
    Oracle Corporation
    Solaris
    risk 0.64cvss 9.8epss 0.03

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.

  • CVE-2016-0692HigApr 21, 2016
    Oracle Corporation
    Berkeley Db
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-0691LowApr 21, 2016
    Oracle Corporation
    Database Server
    risk 0.21cvss 3.3epss 0.01

    Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690.

  • CVE-2016-0690LowApr 21, 2016
    Oracle Corporation
    Database Server
    risk 0.21cvss 3.3epss 0.01

    Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691.

  • CVE-2016-0689HigApr 21, 2016
    Oracle Corporation
    Berkeley Db
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-0688LowApr 21, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.24cvss 3.7epss 0.02

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components.

  • CVE-2016-0687CriApr 21, 2016
    Oracle Corporation
    Java SE Embedded
    risk 0.63cvss 9.6epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.

  • CVE-2016-0686CriApr 21, 2016
    Oracle Corporation
    Java SE Embedded
    risk 0.63cvss 9.6epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.

  • CVE-2016-0685MedApr 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing.

  • CVE-2016-0684MedApr 21, 2016
    Oracle Corporation
    Retail MICROS ARS POS
    risk 0.42cvss 6.5epss 0.02

    Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.

  • CVE-2016-0683MedApr 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework.

  • CVE-2016-0682HigApr 21, 2016
    Oracle Corporation
    Berkeley Db
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability…

  • CVE-2016-0681HigApr 21, 2016
    Oracle Corporation
    Olap
    risk 0.51cvss 7.8epss 0.01

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unspecified vectors.

  • CVE-2016-0680MedApr 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Scm
    risk 0.35cvss 5.4epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.

  • CVE-2016-0679HigApr 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.57cvss 8.7epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect integrity and availability via vectors related to PIA Grids.

  • CVE-2016-0678MedApr 21, 2016
    Oracle Corporation
    VM Virtualbox
    risk 0.44cvss 6.7epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.

  • CVE-2016-0677MedApr 21, 2016
    Oracle Corporation
    Database Server
    risk 0.38cvss 5.9epss 0.02

    Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.

  • CVE-2016-0676MedApr 21, 2016
    Oracle Corporation
    Solaris
    risk 0.31cvss 4.7epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.

  • CVE-2016-0675MedApr 21, 2016
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.02

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700.

  • CVE-2016-0674MedApr 21, 2016
    Oracle Corporation
    Siebel CRM
    risk 0.29cvss 4.4epss 0.00

    Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email.

  • CVE-2016-0673MedApr 21, 2016
    Oracle Corporation
    Siebel UI Framework
    risk 0.35cvss 5.4epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI.

  • CVE-2016-0672MedApr 21, 2016
    Oracle Corporation
    Flexcube Direct Banking
    risk 0.40cvss 6.1epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.

  • CVE-2016-0671LowApr 21, 2016
    Oracle Corporation
    HTTP Server
    risk 0.24cvss 3.7epss 0.01

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.

  • CVE-2016-0669MedApr 21, 2016
    Oracle Corporation
    Solaris
    risk 0.39cvss 6.0epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash.

  • CVE-2016-0668MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.27cvss 4.1epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

  • CVE-2016-0667MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.29cvss 4.4epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking.

  • CVE-2016-0666MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges.

  • CVE-2016-0665MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security: Encryption.

  • CVE-2016-0663MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.31cvss 4.7epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema.

  • CVE-2016-0662MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition.