rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-3374 
The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3370.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3375 
The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3376 
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-7185, and CVE-2016-7211.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3377 
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3350.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3378 
Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "Microsoft Exchange Open Redirect Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3379 
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3381 
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3363.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-14T10:00:00.000Z
CVE-2016-3382 
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3383 
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3384 
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3385 
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3386 
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3387 
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3388 
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3389 
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-7190, and CVE-2016-7194.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3390 
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3391 
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3392 
The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3393 
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3396 
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "GDI+ Remote Code Execution Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T01:00:00.000Z
CVE-2016-3400 
NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-03T16:00:00.000Z
CVE-2016-3401 
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3402 
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3403 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts by leveraging failure to use of a CSRF token and perform referer header checks, aka bugs 100885 and 100899.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-17T14:00:00.000Z
CVE-2016-3404 
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3405 
Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3406 
Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 104294 and 104456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3407 
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3408 
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3409 
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3410 
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3411 
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3412 
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3413 
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3414 
Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3415 
Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-3416 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3417 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3418 
Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0692, and CVE-2016-0694.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3419 
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to Filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3420 
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3431.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3421 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3422 
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3423 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-0698.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3424 
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-21T10:00:00.000Z
CVE-2016-3425 
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3426 
Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3427 
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3428 
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vectors related to Engineering Communication Interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3429 
Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3431 
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3420.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3432 
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-21T10:00:00.000Z
CVE-2016-3433 
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-21T10:00:00.000Z
CVE-2016-3434 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3435 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3436 
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3437 
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3438 
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via three unspecified parameters in an unknown JSP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3439 
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3440 
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-21T10:00:00.000Z
CVE-2016-3441 
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3442 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3443 
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.  NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T10:00:00.000Z
CVE-2016-3444 
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-21T10:00:00.000Z