deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4959
Published: 2016-01-18
Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV77558; http://www-01.ibm.com/support/docview.wss?uid=swg21974157; http://www.securitytracker.com/id/1034697
CVE: CVE-2015-4988
Published: 2016-01-18
Description: Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: http://www-01.ibm.com/support/docview.wss?uid=swg21968868; http://www-01.ibm.com/support/docview.wss?uid=swg21968868
CVE: CVE-2015-5002
Published: 2016-01-18
Description: Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21973985; http://www-01.ibm.com/support/docview.wss?uid=swg21973985
CVE: CVE-2015-5008
Published: 2016-01-18
Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264; http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265; http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432
CVE: CVE-2015-5009
Published: 2016-01-18
Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264; http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265; http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432
CVE: CVE-2015-7886
Published: 2016-01-18
Description: NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://kb.netapp.com/support/index?page=content&id=9010055; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://kb.netapp.com/support/index?page=content&id=9010055
CVE: CVE-2016-0201
Published: 2016-01-18
Description: GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 collision.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21974242; http://www.securityfocus.com/bid/80883; http://www.securitytracker.com/id/1034696
CVE: CVE-2015-5590
Published: 2016-01-19
Description: Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6dedeb40db13971af45276f80b5375030aa7e76f; http://openwall.com/lists/oss-security/2015/07/18/1; http://www.debian.org/security/2015/dsa-3344
CVE: CVE-2015-6527
Published: 2016-01-19
Description: The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplace function.
CVSS Score: 7.3 (HIGH)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6aeee47b2cd47915ccfa3b41433a3f57aea24dd5; http://www.openwall.com/lists/oss-security/2015/07/30/11; https://bugs.php.net/bug.php?id=70140
CVE: CVE-2015-6831
Published: 2016-01-19
Description: Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: http://www.debian.org/security/2015/dsa-3344; http://www.openwall.com/lists/oss-security/2015/08/19/3; http://www.php.net/ChangeLog-5.php
CVE: CVE-2015-6832
Published: 2016-01-19
Description: Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.
CVSS Score: 7.3 (HIGH)
References: http://www.debian.org/security/2015/dsa-3344; http://www.php.net/ChangeLog-5.php; https://bugs.php.net/bug.php?id=70068
CVE: CVE-2015-6833
Published: 2016-01-19
Description: Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.debian.org/security/2015/dsa-3344; http://www.openwall.com/lists/oss-security/2015/08/19/3; http://www.php.net/ChangeLog-5.php
CVE: CVE-2015-6836
Published: 2016-01-19
Description: The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.
CVSS Score: 7.3 (HIGH)
References: http://www.debian.org/security/2015/dsa-3358; http://www.php.net/ChangeLog-5.php; http://www.securityfocus.com/bid/76644
CVE: CVE-2015-8616
Published: 2016-01-19
Description: Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.
CVSS Score: 8.6 (HIGH)
References: http://php.net/ChangeLog-7.php; https://bugs.php.net/bug.php?id=71020; http://php.net/ChangeLog-7.php
CVE: CVE-2015-8617
Published: 2016-01-19
Description: Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: http://php.net/ChangeLog-7.php; http://www.securitytracker.com/id/1034543; https://bugs.php.net/bug.php?id=71105
CVE: CVE-2016-1903
Published: 2016-01-19
Description: The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-119, CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html; http://rhn.redhat.com/errata/RHSA-2016-2750.html
CVE: CVE-2016-1904
Published: 2016-01-19
Description: Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.
CVSS Score: 7.3 (HIGH)
CWE: CWE-189
References: http://www.openwall.com/lists/oss-security/2016/01/14/8; http://www.php.net/ChangeLog-7.php; http://www.securitytracker.com/id/1034608
CVE: CVE-2016-1907
Published: 2016-01-19
Description: The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
CVE: CVE-2015-4951
Published: 2016-01-20
Description: Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg21973484; http://www.securitytracker.com/id/1034692; http://www-01.ibm.com/support/docview.wss?uid=swg21973484
CVE: CVE-2015-8777
Published: 2016-01-20
Description: The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
CVE: CVE-2016-1296
Published: 2016-01-20
Description: The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160119-wsa; http://www.securitytracker.com/id/1034763; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160119-wsa
CVE: CVE-2015-8704
Published: 2016-01-20
Description: apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html
CVE: CVE-2015-8705
Published: 2016-01-20
Description: buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html; http://www.oracle.com/technetwork/topics/security/bulletinoct2[PII_REDACTED].html
CVE: CVE-2015-5295
Published: 2016-01-20
Description: The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176700.html; http://rhn.redhat.com/errata/RHSA-2016-0266.html; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html
CVE: CVE-2015-5516
Published: 2016-01-20
Description: Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 and 11.6.0 before HF6, BIG-IP AFM and PEM 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Analytics 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP APM and ASM 10.1.0 through 10.2.4, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.0 before HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, and 11.3.0, BIG-IP PSM 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, and 11.4.x before 11.4.1 HF, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 might allow remote attackers to cause a denial of service (memory consumption) via a large number of crafted UDP packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1034686; http://www.securitytracker.com/id/1034687; https://support.f5.com/kb/en-us/solutions/public/k/00/sol00032124.html
CVE: CVE-2016-1867
Published: 2016-01-20
Description: The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3785; http://www.openwall.com/lists/oss-security/2016/01/13/2; http://www.openwall.com/lists/oss-security/2016/01/13/6
CVE: CVE-2016-1899
Published: 2016-01-20
Description: CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.
CVSS Score: 3.7 (LOW)
References: http://git.zx2c4.com/cgit/commit/?id=1c581a072651524f3b0d91f33e22a42c4166dd96; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
CVE: CVE-2016-1900
Published: 2016-01-20
Description: CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename.
CVSS Score: 3.7 (LOW)
References: http://git.zx2c4.com/cgit/commit/?id=513b3863d999f91b47d7e9f26710390db55f9463; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
CVE: CVE-2016-1901
Published: 2016-01-20
Description: Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://git.zx2c4.com/cgit/commit/?id=4458abf64172a62b92810c[PII_REDACTED]e6dfc763; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html
CVE: CVE-2016-1928
Published: 2016-01-20
Description: Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2016/Apr/65; http://www.securityfocus.com/archive/1/538212/100/0/threaded; https://erpscan.io/advisories/erpscan-16-005-sap-hana-hdbxsengine-json-dos/
CVE: CVE-2016-1929
Published: 2016-01-20
Description: The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2016/Apr/59; https://erpscan.io/advisories/erpscan-16-002-sap-hana-log-injection-and-no-size-restriction/; https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/
CVE: CVE-2015-4808
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In Filters, a different vulnerability than CVE-2015-6013, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432.
CVSS Score: 1.9 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034711; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4885
Published: 2016-01-21
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034734; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4919
Published: 2016-01-21
Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Monitoring and Diagnostics SEC.
CVSS Score: 6.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034722; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4920
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034735; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4921
Published: 2016-01-21
Description: Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034709; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4922
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Boot.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034735; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4923
Published: 2016-01-21
Description: Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034709; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4924
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034727; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4925
Published: 2016-01-21
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034709; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-4926
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX.
CVSS Score: 2.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034726; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0401
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034711; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0402
Published: 2016-01-21
Description: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
CVE: CVE-2016-0403
Published: 2016-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034735; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2016-0404
Published: 2016-01-21
Description: Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securitytracker.com/id/1034711; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html