Latest CVE Feed
-
5.5
MEDIUMCVE-2017-3043
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality.... Read more
- Published: Apr. 12, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-3073
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution.... Read more
Affected Products : windows_10 windows_8.1 linux_kernel enterprise_linux enterprise_linux_desktop enterprise_linux_workstation flash_player_desktop_runtime flash_player mac_os_x chrome_os +1 more products- Published: May. 09, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-3101
Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.... Read more
Affected Products : connect- Published: Jul. 17, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-3115
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.... Read more
- Published: Aug. 11, 2017
- Modified: Apr. 20, 2025
-
5.8
MEDIUMCVE-2017-3252
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerabil... Read more
- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.3
HIGHCVE-2017-3260
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ... Read more
- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3287
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthentic... Read more
Affected Products : istore- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3338
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthen... Read more
Affected Products : marketing- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3380
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerabili... Read more
Affected Products : advanced_outbound_telephony- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3403
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerabili... Read more
Affected Products : advanced_outbound_telephony- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
4.9
MEDIUMCVE-2017-3640
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoco... Read more
- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3411
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerabili... Read more
Affected Products : advanced_outbound_telephony- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.2
HIGHCVE-2017-3443
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allow... Read more
Affected Products : common_applications- Published: Jan. 27, 2017
- Modified: Apr. 20, 2025
-
8.5
HIGHCVE-2017-3523
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple pr... Read more
- Published: Apr. 24, 2017
- Modified: Apr. 20, 2025
-
7.2
HIGHCVE-2017-3531
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticate... Read more
Affected Products : weblogic_server- Published: Apr. 24, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-3555
Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows ... Read more
Affected Products : ireceivables- Published: Apr. 24, 2017
- Modified: Apr. 20, 2025
-
7.0
HIGHCVE-2017-3608
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to co... Read more
Affected Products : berkeley_db- Published: Apr. 24, 2017
- Modified: Apr. 20, 2025
-
4.9
MEDIUMCVE-2017-3642
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple p... Read more
- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
8.6
HIGHCVE-2017-3790
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of se... Read more
- Published: Feb. 01, 2017
- Modified: Apr. 20, 2025
-
8.6
HIGHCVE-2017-3863
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading... Read more
- Published: Apr. 20, 2017
- Modified: Apr. 20, 2025