deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9770
Published: 2016-04-20
Description: tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html; http://www.openwall.com/lists/oss-security/2016/04/08/14
CVE: CVE-2015-7801
Published: 2016-04-20
Description: Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2015/09/16/1; http://www.ubuntu.com/usn/USN-2951-1; https://bugzilla.redhat.com/show_bug.cgi?id=1264015
CVE: CVE-2015-7802
Published: 2016-04-20
Description: gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://optipng.sourceforge.net/history.txt; http://www.ubuntu.com/usn/USN-2951-1; https://sourceforge.net/p/optipng/bugs/53/
CVE: CVE-2015-8842
Published: 2016-04-20
Description: tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html; http://www.openwall.com/lists/oss-security/2016/04/08/14
CVE: CVE-2016-0891
Published: 2016-04-20
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/136837/EMC-ViPR-SRM-Cross-Site-Request-Forgery.html; http://seclists.org/bugtraq/2016/Apr/106; http://seclists.org/fulldisclosure/2016/Apr/89
CVE: CVE-2016-1384
Published: 2016-04-20
Description: The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/86685; http://www.securitytracker.com/id/1035622; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160419-ios
CVE: CVE-2016-2002
Published: 2016-04-20
Description: The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://zerodayinitiative.com/advisories/ZDI-16-244/; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085303; http://zerodayinitiative.com/advisories/ZDI-16-244/
CVE: CVE-2016-2003
Published: 2016-04-20
Description: HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CVSS Score: 9.8 (CRITICAL)
References: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085438; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085438
CVE: CVE-2016-2202
Published: 2016-04-20
Description: The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/85778; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160407_00; http://www.securityfocus.com/bid/85778
CVE: CVE-2015-6360
Published: 2016-04-21
Description: The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp; http://www.debian.org/security/2016/dsa-3539; http://www.securitytracker.com/id/1035636
CVE: CVE-2015-6479
Published: 2016-04-21
Description: ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01
CVE: CVE-2016-0407
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0408
Published: 2016-04-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035610; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0468
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035618; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0469
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035600; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0479
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035618; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0623
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035629; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0638
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035615; https://www.tenable.com/security/research/tra-2016-09
CVE: CVE-2016-0639
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0640
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
CVSS Score: 6.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0641
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0642
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0643
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.
CVSS Score: 3.3 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0644
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0646
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0647
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0648
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to PS.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0649
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0650
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0651
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
CVE: CVE-2016-0652
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0653
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0654
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0655
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
CVE: CVE-2016-0656
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0657
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.ubuntu.com/usn/USN-2954-1
CVE: CVE-2016-0658
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0659
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.ubuntu.com/usn/USN-2954-1
CVE: CVE-2016-0661
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0662
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.ubuntu.com/usn/USN-2954-1
CVE: CVE-2016-0663
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0665
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security: Encryption.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0666
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0667
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking.
CVSS Score: 4.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035606; http://www.ubuntu.com/usn/USN-2954-1
CVE: CVE-2016-0668
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.
CVSS Score: 4.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
CVE: CVE-2016-0669
Published: 2016-04-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash.
CVSS Score: 6.0 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035629; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0671
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to OSSL Module.
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035617; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0672
Published: 2016-04-21
Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035604; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE: CVE-2016-0673
Published: 2016-04-21
Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html; http://www.securitytracker.com/id/1035598; http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html