Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Total 9622 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5524 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 5.0 MEDIUM 5.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.
CVE-2016-5523 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AutoVue Java Applet.
CVE-2016-5522 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.0 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5521 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 7.5 HIGH 6.5 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5512.
CVE-2016-5518 1 Oracle 1 Agile Engineering Data Management 2016-11-28 6.8 MEDIUM 8.1 HIGH
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
CVE-2016-5515 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RMIServlet.
CVE-2016-5514 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 6.5 MEDIUM 8.8 HIGH
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ExportServlet.
CVE-2016-5513 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.0 MEDIUM 4.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
CVE-2016-5512 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 4.3 MEDIUM 6.1 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521.
CVE-2016-5510 1 Oracle 1 Agile Product Lifecycle Management Framework 2016-11-28 5.0 MEDIUM 5.3 MEDIUM
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2016-5503 1 Oracle 1 Sun Zfs Storage Appliance Kit 2016-11-28 4.6 MEDIUM 8.2 HIGH
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services.
CVE-2016-5492 1 Oracle 1 Sun Zfs Storage Appliance Kit 2016-11-28 3.6 LOW 7.1 HIGH
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.
CVE-2016-5491 1 Oracle 1 Commerce Service Center 2016-11-28 5.8 MEDIUM 8.2 HIGH
Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5486 1 Oracle 1 Sun Zfs Storage Appliance Kit 2016-11-28 4.9 MEDIUM 5.5 MEDIUM
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.
CVE-2016-5482 1 Oracle 1 Commerce Guided Search 2016-11-28 5.8 MEDIUM 8.2 HIGH
Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5481 1 Oracle 1 Sun Zfs Storage Appliance Kit 2016-11-28 4.3 MEDIUM 3.7 LOW
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via vectors related to Core Services.
CVE-2016-5358 2 Oracle, Wireshark 2 Solaris, Wireshark 2016-11-28 4.3 MEDIUM 5.9 MEDIUM
epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVE-2016-5357 2 Oracle, Wireshark 2 Solaris, Wireshark 2016-11-28 4.3 MEDIUM 5.9 MEDIUM
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVE-2016-4962 2 Oracle, Xen 2 Vm Server, Xen 2016-11-28 6.8 MEDIUM 6.7 MEDIUM
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.
CVE-2014-7142 3 Canonical, Oracle, Squid-cache 3 Ubuntu Linux, Solaris, Squid 2016-11-28 6.4 MEDIUM N/A
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.