Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-29 17:03Z
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3325 — Oracle Siebel_ui_framework: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3325

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel UI Framework, attacks may significantly impact additional products. Successful attacks CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3324 — Oracle Primavera_p6_enterprise_project_portfolio_management: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3324

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, atta CVSSv3.1 10.0 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3316 — Oracle Vm_virtualbox: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks ma CVSSv3.1 8.4 (HIGH)

CWECWE 20VNDOracleVNDVulnerabilityTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3310 — Oracle Database: Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3310

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in OJVM, attacks may significantly impact additional products. CVSSv3.1 9.0 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3303 — Oracle Xml_gateway: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3303

Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle XML Gateway CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3293 — Oracle Outside_in_technology: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3293

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible d CVSSv3.1 8.6 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3289 — Oracle Jdk: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3289

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embed CVSSv3.1 9.6 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
728 × 90 / responsive · programmatic ad slot
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3287 — Oracle Istore: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3287

Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significa CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3285 — Oracle Service_fulfillment_manager: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3285

Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3284 — Oracle Service_fulfillment_manager: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3284

Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3279 — Oracle Leads_management: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3279

Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Leads Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Leads Management, attacks may significant CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3278 — Oracle One-to-one_fulfillment: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3278

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may signi CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3275 — Oracle Email_center: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3275

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, att CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3274 — Oracle Email_center: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3274

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, att CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3272 — Oracle Jdk: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3272

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java CVSSv3.1 9.6 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3271 — Oracle Outside_in_technology: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3271

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible d CVSSv3.1 8.6 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3266 — Oracle Outside_in_technology: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3266

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development CVSSv3.1 9.8 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3263 — Oracle Primavera_p6_enterprise_project_portfolio_management: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3263

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion o CVSSv3.1 8.1 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3260 — Oracle Jdk: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3260

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of CVSSv3.1 8.3 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3248 — Oracle Weblogic_server: Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3248

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Ava CVSSv3.1 9.8 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3241 — Oracle Jdk: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3241

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impac CVSSv3.1 9.0 (CRITICAL)

CWECWE 20VNDOracleVNDVulnerabilityTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9636 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9636

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9635 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9635

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9634 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9634

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-8325 — Oracle One-to-one_fulfillment: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8325

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to cri CVSSv3.1 9.1 (CRITICAL)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
9.1
CVSS v3.1
96
Edit Score