deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0581
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Approvals Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to AME Page rendering.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0582
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0583, and CVE-2016-0584.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0583
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0582, and CVE-2016-0584.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0584
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0579, CVE-2016-0582, and CVE-2016-0583.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0585
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect availability via vectors related to ICX Error.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0586
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0587
Published: 2016-01-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors related to File Processing.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034720; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0588
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarchy Viewer.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0589
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0590
Published: 2016-01-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034720; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0591
Published: 2016-01-21
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supplier Change.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034720; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0592
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core.
CVSS Score: 2.1 (LOW)
References: http://www.debian.org/security/2016/dsa-3454; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/81224
CVE: CVE-2016-0594
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0595
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html
CVE: CVE-2016-0596
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0597
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0598
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0599
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034708; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0600
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0601
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034708; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0602
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is an untrusted search path issue that allows local users to gain privileges via a Trojan horse dll in the "application directory."
CVSS Score: 6.2 (MEDIUM)
References: http://seclists.org/fulldisclosure/2016/Feb/54; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/archive/1/537462/100/0/threaded
CVE: CVE-2016-0605
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html
CVE: CVE-2016-0606
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0607
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.
CVSS Score: 2.8 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html
CVE: CVE-2016-0608
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0609
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.
CVSS Score: 1.7 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
CVE: CVE-2016-0610
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html
CVE: CVE-2016-0611
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html; http://rhn.redhat.com/errata/RHSA-2016-0705.html
CVE: CVE-2016-0614
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034711; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0616
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html
CVE: CVE-2016-0618
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones.
CVSS Score: 1.4 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034735; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-8472
Published: 2016-01-21
Description: Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html
CVE: CVE-2015-6412
Published: 2016-01-22
Description: Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain access via an SSH session, aka Bug ID CSCut88070.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-d9036
CVE: CVE-2015-6435
Published: 2016-01-22
Description: An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm; http://www.securitytracker.com/id/1034743
CVE: CVE-2015-7909
Published: 2016-01-22
Description: Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port 5000.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-337-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-337-02
CVE: CVE-2015-8362
Published: 2016-01-22
Description: The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote attackers to obtain access via a (1) SSH or (2) HTTP session, a different vulnerability than CVE-2016-1984.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://blog.sec-consult.com/2016/01/deliberately-hidden-backdoor-account-in.html; http://seclists.org/fulldisclosure/2016/Jan/63; http://www.amx.com/techcenter/NXSecurityBrief/
CVE: CVE-2016-1134
Published: 2016-01-22
Description: Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN09268287/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000005; http://jvn.jp/en/jp/JVN09268287/index.html
CVE: CVE-2016-1135
Published: 2016-01-22
Description: Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN49225722/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000006; http://jvn.jp/en/jp/JVN49225722/index.html
CVE: CVE-2016-1984
Published: 2016-01-22
Description: The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, which makes it easier for remote attackers to obtain access via a (1) SSH or (2) HTTP session, a different vulnerability than CVE-2015-8362.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://blog.sec-consult.com/2016/01/deliberately-hidden-backdoor-account-in.html; http://seclists.org/fulldisclosure/2016/Jan/63; http://www.amx.com/techcenter/NXSecurityBrief/
CVE: CVE-2015-6013
Published: 2016-01-22
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/81227; http://www.securitytracker.com/id/1034711
CVE: CVE-2015-6014
Published: 2016-01-22
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6015, and CVE-2016-0432.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted DOC file.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/81233; http://www.securitytracker.com/id/1034711
CVE: CVE-2015-6015
Published: 2016-01-22
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6014, and CVE-2016-0432.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted Paradox DB file.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/81243; http://www.securitytracker.com/id/1034711
CVE: CVE-2015-6925
Published: 2016-01-22
Description: wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html; https://github.com/IAIK/wolfSSL-DoS; https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html