deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0269
Published: 2016-07-15
Description: Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985734; http://www.securityfocus.com/bid/91690; http://www-01.ibm.com/support/docview.wss?uid=swg21985734
CVE: CVE-2016-0330
Published: 2016-07-15
Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.
CVSS Score: 7.3 (HIGH)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985736; http://www.securitytracker.com/id/1036255; http://www-01.ibm.com/support/docview.wss?uid=swg21985736
CVE: CVE-2016-0338
Published: 2016-07-15
Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2) examining a process.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985736; http://www.securitytracker.com/id/1036255; http://www-01.ibm.com/support/docview.wss?uid=swg21985736
CVE: CVE-2016-0339
Published: 2016-07-15
Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985736; http://www.securityfocus.com/bid/91689; http://www.securitytracker.com/id/1036255
CVE: CVE-2016-0340
Published: 2016-07-15
Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985736; http://www.securityfocus.com/bid/91692; http://www.securitytracker.com/id/1036255
CVE: CVE-2016-0357
Published: 2016-07-15
Description: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985736; http://www.securityfocus.com/bid/87528; http://www.securitytracker.com/id/1036255
CVE: CVE-2016-2865
Published: 2016-07-15
Description: The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21985865; http://www.securityfocus.com/bid/91680; http://www-01.ibm.com/support/docview.wss?uid=swg21985865
CVE: CVE-2016-5637
Published: 2016-07-15
Description: The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion" issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.kb.cert.org/vuls/id/123799; http://www.securityfocus.com/bid/91726; http://www.kb.cert.org/vuls/id/123799
CVE: CVE-2016-5660
Published: 2016-07-15
Description: Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/665280; http://www.kb.cert.org/vuls/id/JLAD-ABMPVA; http://www.securityfocus.com/bid/91765
CVE: CVE-2016-5661
Published: 2016-07-15
Description: Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.kb.cert.org/vuls/id/665280; http://www.kb.cert.org/vuls/id/JLAD-ABMPVA; http://www.securityfocus.com/bid/91765
CVE: CVE-2016-0321
Published: 2016-07-17
Description: IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006; http://www-01.ibm.com/support/docview.wss?uid=swg21981692; http://www.securityfocus.com/bid/91751
CVE: CVE-2016-0393
Published: 2016-07-17
Description: IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21986053; http://www.securityfocus.com/bid/91744; http://www-01.ibm.com/support/docview.wss?uid=swg21986053
CVE: CVE-2016-1448
Published: 2016-07-17
Description: Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms2; http://www.securityfocus.com/bid/91799; http://www.securitytracker.com/id/1036320
CVE: CVE-2016-1459
Published: 2016-07-17
Description: Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp; http://www.securityfocus.com/bid/91800; http://www.securitytracker.com/id/1036321
CVE: CVE-2016-3039
Published: 2016-07-17
Description: IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 8.1 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO89357; http://www-01.ibm.com/support/docview.wss?uid=swg21985858; http://www.securityfocus.com/bid/91796
CVE: CVE-2016-5385
Published: 2016-07-19
Description: PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-601
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html; http://rhn.redhat.com/errata/RHSA-2016-1609.html; http://rhn.redhat.com/errata/RHSA-2016-1610.html
CVE: CVE-2016-5386
Published: 2016-07-19
Description: The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-1538.html; http://www.kb.cert.org/vuls/id/797896; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2016-5387
Published: 2016-07-19
Description: The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.  NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.
CVSS Score: 8.1 (HIGH)
References: http://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html; http://rhn.redhat.com/errata/RHSA-2016-1624.html; http://rhn.redhat.com/errata/RHSA-2016-1625.html
CVE: CVE-2016-5388
Published: 2016-07-19
Description: Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00025.html; http://rhn.redhat.com/errata/RHSA-2016-1624.html; http://rhn.redhat.com/errata/RHSA-2016-2045.html
CVE: CVE-2015-8947
Published: 2016-07-19
Description: hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html; http://rhn.redhat.com/errata/RHSA-2016-0072.html; http://www.securityfocus.com/bid/92039
CVE: CVE-2016-2775
Published: 2016-07-19
Description: ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/92037; http://www.securitytracker.com/id/1036360; https://access.redhat.com/errata/RHBA-2017:0651
CVE: CVE-2016-5080
Published: 2016-07-19
Description: Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html; http://seclists.org/fulldisclosure/2016/Jul/65; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160721-asn1c
CVE: CVE-2016-5653
Published: 2016-07-19
Description: Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.kb.cert.org/vuls/id/682704; http://www.securityfocus.com/bid/92035; http://www.kb.cert.org/vuls/id/682704
CVE: CVE-2016-5654
Published: 2016-07-19
Description: Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/682704; http://www.securityfocus.com/bid/92035; http://www.kb.cert.org/vuls/id/682704
CVE: CVE-2016-5655
Published: 2016-07-19
Description: Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/682704; http://www.securityfocus.com/bid/92035; http://www.kb.cert.org/vuls/id/682704
CVE: CVE-2016-0635
Published: 2016-07-21
Description: Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Master Person Index component in Oracle Health Sciences Applications 2.0.12, 3.0.0, and 4.0.1; the Oracle Documaker component in Oracle Insurance Applications before 12.5; the Oracle Insurance Calculation Engine component in Oracle Insurance Applications 9.7.1, 10.1.2, and 10.2.2; the Oracle Insurance Policy Administration J2EE and Oracle Insurance Rules Palette components in Oracle Insurance Applications 9.6.1, 9.7.1, 10.0.1, 10.1.2, 10.2.0, and 10.2.2; the Oracle Retail Integration Bus component in Oracle Retail Applications 15.0; the Oracle Retail Order Broker component in Oracle Retail Applications 5.1, 5.2, and 15.0; the Primavera Contract Management component in Oracle Primavera Products Suite 14.2; the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.2, 8.3, 8.4, 15.1, 15.2, and 16.1; the Oracle Financial Services Analytical Applications Infrastructure component in Oracle Financial Services Applications 8.0.0, 8.0.1, 8.0.2, and 8.0.3; the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce 3.1.1, 3.1.2, 11.0, 11.1, and 11.2; the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5; the Oracle Communications BRM - Elastic Charging Engine 11.2.0.0.0 and 11.3.0.0.0; the Oracle Enterprise Repository Enterprise Repository 12.1.3.0.0; the Oracle Financial Services Behavior Detection Platform 8.0.1 and 8.0.2; the Oracle Hyperion Essbase 12.2.1.1; the Oracle Tuxedo System and Applications Monitor (TSAM) 11.1.1.2.0, 11.1.1.2.1, 11.1.1.2.1, 12.1.1.1.0, 12.1.3.0.0, and 12.2.2.0.0; the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Spring)) 7.0, 7.1 and 7.2; the Oracle Endeca Information Discovery Integrator 3.2; the Converged Commerce component of Oracle Retail Applications 16.0.1; the Oracle Identity Manager 11.1.2.3.0; Oracle Enterprise Manager for MySQL Database 12.1.0.4; Oracle Retail Invoice Matching 12.0, 13.0, 13.1, 13.2, 14.0, and 14.1; Oracle Communications Performance Intelligence Center (PIC) Software Prior to 10.2.1 and the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: AnswerFlow (Spring Framework)) version 8.5.1.0 - 8.5.1.7 and 8.6.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 8.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2016-3424
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91976
CVE: CVE-2016-3432
Published: 2016-07-21
Description: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92033
CVE: CVE-2016-3433
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92029
CVE: CVE-2016-3440
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVSS Score: 7.7 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91910
CVE: CVE-2016-3444
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91883
CVE: CVE-2016-3445
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.
CVSS Score: 5.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securitytracker.com/id/1036373
CVE: CVE-2016-3446
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.
CVSS Score: 8.3 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92010
CVE: CVE-2016-3448
Published: 2016-07-21
Description: Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91885
CVE: CVE-2016-3450
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect confidentiality via vectors related to Services, a different vulnerability than CVE-2016-5460 and CVE-2016-5466.
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91920
CVE: CVE-2016-3451
Published: 2016-07-21
Description: Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity via vectors related to Web.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/92022
CVE: CVE-2016-3452
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption.
CVSS Score: 3.7 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2016-0705.html; http://rhn.redhat.com/errata/RHSA-2016-1480.html; http://rhn.redhat.com/errata/RHSA-2016-1481.html
CVE: CVE-2016-3453
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91947
CVE: CVE-2016-3458
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
CVE: CVE-2016-3459
Published: 2016-07-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.
CVSS Score: 4.9 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-1601.html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787
CVE: CVE-2016-3467
Published: 2016-07-21
Description: Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91894
CVE: CVE-2016-3468
Published: 2016-07-21
Description: Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91922
CVE: CVE-2016-3469
Published: 2016-07-21
Description: Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows local users to affect confidentiality via vectors related to Services.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91787; http://www.securityfocus.com/bid/91928