rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-0480 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the TMAPReportImage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0481 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the scheduleReportName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0482 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0485, and CVE-2016-0486.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0483 
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0484 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the scriptPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0485 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0486.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the reportName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0486 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0485.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the exportFileName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0487 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0490.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the process method in the ActionServlet servlet, which allows remote attackers to bypass authentication via directory traversal sequences following an unspecified URI string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0488 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0492.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function in the admin pages, which allows remote attackers to bypass authentication and gain administrator access via directory traversal sequences following a URI entry that does not require authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0489 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the ActionServlet servlet, which allows remote authenticated users to upload and execute arbitrary files via directory traversal sequences in the tempfilename parameter in a ReportImage action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0490 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0487.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the UploadServlet servlet, which allows remote attackers to upload and execute arbitrary files via directory traversal sequences in a filename header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0491 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that the UploadFileAction servlet allows remote authenticated users to upload and execute arbitrary files via an * (asterisk) character in the fileType parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0492 
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0488.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function, which allows remote attackers to bypass authentication via directory traversal sequences following a URI entry that does not require authentication, as demonstrated by olt/Login.do/../../olt/UploadFileUpload.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0493 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Kernel Cryptography.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0494 
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0495 
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0496 
Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0, and 18.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0497 
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0498 
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0499 
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-4794.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0500 
Unspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle Retail Applications 4.0 and 4.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0501 
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows remote attackers to affect availability via vectors related to SGD Core.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0502 
Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0503 
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0504 
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0505 
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0506 
Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0507 
Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0519.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0508 
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0509 
Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AP Web Utilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0510 
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0511 
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Common Components, a different vulnerability than CVE-2016-0547, CVE-2016-0548, and CVE-2016-0549.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0512 
Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Self Service - Common Modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0513 
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0514 
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0515 
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0514.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0516 
Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0517 
Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0518.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0518 
Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0517.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0519 
Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0507.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0520 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to Java APIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0521 
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0522 
Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0523 
Unspecified vulnerability in the Oracle Interaction Blending component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Blending Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0524 
Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0525 
Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0526 
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via unknown vectors related to Wireless Framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0527 
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0528, CVE-2016-0529, and CVE-2016-0530.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0528 
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0529, and CVE-2016-0530.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0529 
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0528, and CVE-2016-0530.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0530 
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0527, CVE-2016-0528, and CVE-2016-0529.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z
CVE-2016-0531 
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Oracle Diagnostics Interfaces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-21T02:00:00.000Z