deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7854
Published: 2016-10-21
Description: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7852, and CVE-2016-7853.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93496; https://helpx.adobe.com/security/products/acrobat/apsb16-33.html; http://www.securityfocus.com/bid/93496
CVE: CVE-2016-0239
Published: 2016-10-22
Description: IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21988999; http://www.securityfocus.com/bid/93827; http://www-01.ibm.com/support/docview.wss?uid=swg21988999
CVE: CVE-2016-0240
Published: 2016-10-22
Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.
CVSS Score: 3.7 (LOW)
CWE: CWE-254
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990232; http://www.securityfocus.com/bid/93836; http://www-01.ibm.com/support/docview.wss?uid=swg21990232
CVE: CVE-2016-0241
Published: 2016-10-22
Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990219; http://www.securityfocus.com/bid/93828; http://www-01.ibm.com/support/docview.wss?uid=swg21990219
CVE: CVE-2016-0242
Published: 2016-10-22
Description: IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990229; http://www.securityfocus.com/bid/93825; http://www-01.ibm.com/support/docview.wss?uid=swg21990229
CVE: CVE-2016-0246
Published: 2016-10-22
Description: Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990377; http://www.securityfocus.com/bid/93400; http://www-01.ibm.com/support/docview.wss?uid=swg21990377
CVE: CVE-2016-0247
Published: 2016-10-22
Description: IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990368; http://www.securityfocus.com/bid/93341; http://www-01.ibm.com/support/docview.wss?uid=swg21990368
CVE: CVE-2016-0326
Published: 2016-10-22
Description: IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www-01.ibm.com/support/docview.wss?uid=swg21989735; http://www.securityfocus.com/bid/93824; http://www-01.ibm.com/support/docview.wss?uid=swg21989735
CVE: CVE-2016-0328
Published: 2016-10-22
Description: IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990226; http://www.securityfocus.com/bid/93402; http://www-01.ibm.com/support/docview.wss?uid=swg21990226
CVE: CVE-2016-0377
Published: 2016-10-22
Description: The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917; http://www-01.ibm.com/support/docview.wss?uid=swg21980645; http://www.securityfocus.com/bid/92514
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93604
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://bugzilla.redhat.com/show_bug.cgi?id=1316083; https://patrick.uiterwijk.org/2016/03/09/fedora-spam-dwf-2016-89000/; https://bugzilla.redhat.com/show_bug.cgi?id=1316083
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: https://bugzilla.gnome.org/show_bug.cgi?id=754488; https://bugzilla.gnome.org/show_bug.cgi?id=754488
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: Ruckus Wireless H500 web management interface CSRF
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt; https://www.tripwire.com/state-of-security/vulnerability-management/ruckus-vulnerability/; http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: Ruckus Wireless H500 web management interface authentication bypass
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-287
References: http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt; https://www.tripwire.com/state-of-security/vulnerability-management/ruckus-vulnerability/; http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-25
Description: Ruckus Wireless H500 web management interface denial of service
CVSS Score: 7.5 (HIGH)
References: http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt; https://www.tripwire.com/state-of-security/vulnerability-management/ruckus-vulnerability/; http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt
CVE: CVE-2016-3473
Published: 2016-10-25
Description: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93719; http://www.securitytracker.com/id/1037051
CVE: CVE-2016-3492
Published: 2016-10-25
Description: Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVSS Score: 6.5 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-2130.html; http://rhn.redhat.com/errata/RHSA-2016-2131.html; http://rhn.redhat.com/errata/RHSA-2016-2595.html
CVE: CVE-2016-3495
Published: 2016-10-25
Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93670; http://www.securitytracker.com/id/1037050
CVE: CVE-2016-3505
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.
CVSS Score: 8.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93708; http://www.securitytracker.com/id/1037052
CVE: CVE-2016-3551
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.
CVSS Score: 9.8 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93658; http://www.securitytracker.com/id/1037051
CVE: CVE-2016-3562
Published: 2016-10-25
Description: Unspecified vulnerability in the RDBMS Security and SQL*Plus components in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality via vectors related to DBA.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93640; http://www.securitytracker.com/id/1037035
CVE: CVE-2016-5479
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93611; http://www.securitytracker.com/id/1037049
CVE: CVE-2016-5480
Published: 2016-10-25
Description: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vectors related to Bash.
CVSS Score: 2.8 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93717; http://www.securitytracker.com/id/1037048
CVE: CVE-2016-5481
Published: 2016-10-25
Description: Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via vectors related to Core Services.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93705; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5482
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93664; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5486
Published: 2016-10-25
Description: Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-199
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93696; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5487
Published: 2016-10-25
Description: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 5.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93742; http://www.securitytracker.com/id/1037048
CVE: CVE-2016-5488
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.
CVSS Score: 5.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93627; http://www.securitytracker.com/id/1037052
CVE: CVE-2016-5489
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93738; http://www.securitytracker.com/id/1037038
CVE: CVE-2016-5490
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect confidentiality via vectors related to INFRA.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93677; http://www.securitytracker.com/id/1037049
CVE: CVE-2016-5491
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93667; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5492
Published: 2016-10-25
Description: Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93701; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5493
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93654; http://www.securitytracker.com/id/1037049
CVE: CVE-2016-5495
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93736; http://www.securitytracker.com/id/1037051
CVE: CVE-2016-5497
Published: 2016-10-25
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93631; http://www.securitytracker.com/id/1037035
CVE: CVE-2016-5498
Published: 2016-10-25
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93620; http://www.securitytracker.com/id/1037035
CVE: CVE-2016-5499
Published: 2016-10-25
Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5498.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93629; http://www.securitytracker.com/id/1037035
CVE: CVE-2016-5500
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93680; http://www.securitytracker.com/id/1037051
CVE: CVE-2016-5501
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93687; http://www.securitytracker.com/id/1037053
CVE: CVE-2016-5502
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93656; http://www.securitytracker.com/id/1037049
CVE: CVE-2016-5503
Published: 2016-10-25
Description: Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93689; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5504
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93679; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5505
Published: 2016-10-25
Description: Unspecified vulnerability in the RDBMS Programmable Interface component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93613; http://www.securitytracker.com/id/1037035
CVE: CVE-2016-5506
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware allows local users to affect confidentiality and integrity via vectors related to App Server.
CVSS Score: 3.1 (LOW)
CWE: CWE-284
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93648; http://www.securitytracker.com/id/1037051
CVE: CVE-2016-5507
Published: 2016-10-25
Description: Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
CVSS Score: 4.9 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-2749.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93678
CVE: CVE-2016-5508
Published: 2016-10-25
Description: Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93731; http://www.securitytracker.com/id/1037048
CVE: CVE-2016-5510
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93669; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2016-5511
Published: 2016-10-25
Description: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/93683; http://www.securitytracker.com/id/1037051