Browse CVEs

CRITICAL 9.1 CVE-2016-0699 Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attac… Flexcube Direct Banking Mitigation only Fix from $2,3002016-04-21 CRITICAL 9.8 CVE-2016-0693 Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vector… Solaris Mitigation only Fix from $2,3002016-04-21 CRITICAL 9.6 CVE-2016-0686 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integr… Jdk Mitigation only Fix from $2,3002016-04-21 CRITICAL 9.6 CVE-2016-0687 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integr… Jdk Mitigation only Fix from $2,3002016-04-21 CRITICAL 9.8 CVE-2016-0638EPSS 63% Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attack… Weblogic Server Patch available Fix from $2,3002016-04-21 CRITICAL 9.8 CVE-2016-0705EPSS 26% Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows rem… MySQL after 5.7.11 Fix from $2,3002016-03-03 CRITICAL 9.8 CVE-2015-8668EPSS 14% Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to ex… Linux after 4.0.6 Fix from $2,3002016-01-08 CRITICAL 9.8 CVE-2015-8391EPSS 6% The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of ser… Linux Mitigation only Fix from $2,3002015-12-02 CRITICAL 9.8 CVE-2015-4852 KEVEPSS 96% The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands… Virtual Desktop Infrastructure after 3.5.2 Fix from $2,3002015-11-18 CRITICAL 9.8 CVE-2014-7169 KEVEPSS 100% GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which… Linux Patch available Fix from $2,3002014-09-25 CRITICAL 9.8 CVE-2014-6271 KEVEPSS 100% GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to e… Linux Patch available Fix from $2,3002014-09-24 CRITICAL 9.8 CVE-2013-2465 KEVEPSS 99% Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0… Jre Patch available Fix from $2,3002013-06-18 CRITICAL 9.1 CVE-2012-3152 KEVEPSS 99% Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attack… Fusion Middleware Patch available Fix from $2,3002012-10-16 CRITICAL 9.8 CVE-2012-5076 KEVEPSS 91% Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect … Jre Patch available Fix from $2,3002012-10-16 CRITICAL 9.8 CVE-2012-1710 KEVEPSS 12% Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect … Fusion Middleware Patch available Fix from $2,3002012-05-03 CRITICAL 9.8 CVE-2004-1363EPSS 9% Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are e… Application Server Patch available Fix from $2,3002004-08-04