deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-8312
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95469; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8313
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 4.1 (Confidentiality impacts).
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95489; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8314
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 3.1 (Confidentiality impacts).
CVSS Score: 3.1 (LOW)
CWE: CWE-254
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95609; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8315
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 8.1 (Confidentiality and Integrity impacts).
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95496; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8316
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95516; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8317
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.3 (Integrity impacts).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95517; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8318
Published: 2017-01-27
Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.8 (Availability impacts).
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95580; http://www.securitytracker.com/id/1037640
CVE: CVE-2016-8319
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Investor Servicing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95514; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8320
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95596; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8322
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95608; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8323
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Core Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95556; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8324
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Core Banking accessible data. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95607; http://www.securitytracker.com/id/1037636
CVE: CVE-2016-8325
Published: 2017-01-27
Description: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS v3.0 Base Score 9.1 (Confidentiality and Integrity impacts).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95595; http://www.securitytracker.com/id/1037639
CVE: CVE-2016-8327
Published: 2017-01-27
Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).
CVSS Score: 4.4 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95557; http://www.securitytracker.com/id/1037640
CVE: CVE-2016-8328
Published: 2017-01-27
Description: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 3.7 (Integrity impacts).
CVSS Score: 3.7 (LOW)
References: http://rhn.redhat.com/errata/RHSA-2017-0175.html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95581
CVE: CVE-2016-8329
Published: 2017-01-27
Description: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Mobile Application Platform). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-254
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95495; http://www.securitytracker.com/id/1037634
CVE: CVE-2016-8330
Published: 2017-01-27
Description: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data. CVSS v3.0 Base Score 3.7 (Integrity impacts).
CVSS Score: 3.7 (LOW)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95572; http://www.securitytracker.com/id/1037641
CVE: CVE-2016-9298
Published: 2017-01-27
Description: Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/11/13/1; http://www.openwall.com/lists/oss-security/2016/11/14/10; http://www.securityfocus.com/bid/94310
CVE: CVE-2016-9634
Published: 2017-01-27
Description: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2975.html; http://rhn.redhat.com/errata/RHSA-2017-0019.html; http://rhn.redhat.com/errata/RHSA-2017-0020.html
CVE: CVE-2016-9635
Published: 2017-01-27
Description: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2975.html; http://rhn.redhat.com/errata/RHSA-2017-0019.html; http://rhn.redhat.com/errata/RHSA-2017-0020.html
CVE: CVE-2016-9636
Published: 2017-01-27
Description: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2975.html; http://rhn.redhat.com/errata/RHSA-2017-0019.html; http://rhn.redhat.com/errata/RHSA-2017-0020.html
CVE: CVE-2016-9795
Published: 2017-01-27
Description: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11, 11.3, 11.3.5, and 11.3.6 on AIX, HP-UX, Linux, and Solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/540062/100/0/threaded; http://www.securityfocus.com/bid/95819; http://www.securitytracker.com/id/1037730
CVE: CVE-2017-3231
Published: 2017-01-27
Description: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2017-0175.html; http://rhn.redhat.com/errata/RHSA-2017-0176.html; http://rhn.redhat.com/errata/RHSA-2017-0177.html
CVE: CVE-2017-3235
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 3.5 (Confidentiality and Integrity impacts).
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95555; http://www.securitytracker.com/id/1037636
CVE: CVE-2017-3236
Published: 2017-01-27
Description: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts).
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95552; http://www.securitytracker.com/id/1037636
CVE: CVE-2017-3238
Published: 2017-01-27
Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
CVSS Score: 6.5 (MEDIUM)
References: http://www.debian.org/security/2017/dsa-3767; http://www.debian.org/security/2017/dsa-3770; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2017-3239
Published: 2017-01-27
Description: Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GlassFish Server executes to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts).
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/95493; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html