Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-29 20:12Z
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3274 — Oracle Email_center: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3274

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, att CVSSv3.1 8.2 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3272 — Oracle Jdk: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3272

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java CVSSv3.1 9.6 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3271 — Oracle Outside_in_technology: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3271

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters ). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible d CVSSv3.1 8.6 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3266 — Oracle Outside_in_technology: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3266

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development CVSSv3.1 9.8 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3263 — Oracle Primavera_p6_enterprise_project_portfolio_management: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3263

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Team Member). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion o CVSSv3.1 8.1 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2017-3260 — Oracle Jdk: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3260

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of CVSSv3.1 8.3 (HIGH)

VNDOracleVNDVulnerabilityTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3248 — Oracle Weblogic_server: Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3248

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Ava CVSSv3.1 9.8 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2017-3241 — Oracle Jdk: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3241

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impac CVSSv3.1 9.0 (CRITICAL)

CWECWE 20VNDOracleVNDVulnerabilityTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9636 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9636

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9635 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9635

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-9634 — Gstreamer Gstreamer: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9634

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDGstreamerTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-8325 — Oracle One-to-one_fulfillment: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8325

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to cri CVSSv3.1 9.1 (CRITICAL)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2016-8315 — Oracle Flexcube_investor_servicing: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access CVSSv3.1 8.1 (HIGH)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2016-8312 — Oracle Flexcube_private_banking: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8312

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CVSSv3.1 8.2 (HIGH)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2016-8298 — Oracle Flexcube_private_banking: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8298

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical da CVSSv3.1 8.1 (HIGH)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
HIGH

CVE-2016-8297 — Oracle Flexcube_universal_banking: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8297

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access CVSSv3.1 8.1 (HIGH)

CWECWE 284VNDOracleVNDVulnerabilityTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-01-27
2017-01-27 22:59Z
CRIT

CVE-2016-5528 — Oracle Glassfish_server: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-5528

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can res CVSSv3.1 9.0 (CRITICAL)

VNDOracleVNDVulnerabilityTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2017-01-27
2017-01-27 17:59Z
CRIT

CVE-2016-8411 — Google Android: Buffer overflow vulnerability while processing QMI QOS TLVs.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8411

Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDGoogleVNDBufferTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-26
2017-01-26 21:59Z
CRIT

CVE-2016-9054 — Aerospike Database_server: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9054

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_list_by_set_binid resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787VNDAerospikeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-26
2017-01-26 21:59Z
CRIT

CVE-2016-9052 — Aerospike Database_server: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9052

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_by_iname resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787VNDAerospikeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-26
2017-01-26 21:59Z
HIGH

CVE-2016-9050 — Aerospike Database_server: An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9050

An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be used to trigger a denial of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability. CVSSv3.1 8.2 (HIGH)

CWECWE 125VNDAerospikeTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2017-01-26
2017-01-26 15:59Z
CRIT

CVE-2016-6912 — Libgd Libgd: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-6912

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values. CVSSv3.1 9.8 (CRITICAL)

CWECWE 415VNDDoubleVNDLibgdTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-01-26
2017-01-26 07:59Z
HIGH

CVE-2017-3794 — Cisco Webex_meetings_server: A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3794

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against an administrative user. More Information: CSCuz03317. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12. CVSSv3.1 8.8 (HIGH)

CWECWE 352VNDCiscoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-01-26
2017-01-26 07:59Z
HIGH

CVE-2016-9218 — Cisco Hybrid_meeting_server: A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9218

A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvc28662. Known Affected Releases: 1.0. CVSSv3.1 8.8 (HIGH)

CWECWE 352VNDCiscoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-01-25
2017-01-25 19:59Z
CRIT

CVE-2016-9307 — Autodesk Fbx_software_development_kit: Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-9307

Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDAutodeskTYPVulnerability
9.8
CVSS v3.1
99
Edit Score