Latest CVE Feed
-
5.0
MEDIUMCVE-2016-0402
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.... Read more
- EPSS Score: %1.87
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-0401
Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429.... Read more
Affected Products : fusion_middleware- EPSS Score: %0.31
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
2.6
LOWCVE-2015-4926
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX.... Read more
Affected Products : e-business_suite- EPSS Score: %0.31
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
6.5
MEDIUMCVE-2015-4925
Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.... Read more
Affected Products : database_server- EPSS Score: %0.38
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
3.5
LOWCVE-2015-4924
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security.... Read more
Affected Products : supply_chain_products_suite- EPSS Score: %0.15
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2015-4923
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.... Read more
Affected Products : database_server- EPSS Score: %0.36
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2015-4922
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Boot.... Read more
Affected Products : solaris- EPSS Score: %0.12
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
4.0
MEDIUMCVE-2015-4921
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.... Read more
Affected Products : database_server- EPSS Score: %0.15
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2015-4920
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service.... Read more
Affected Products : solaris- EPSS Score: %0.11
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-4919
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Monitoring and Diagnostics SEC.... Read more
- EPSS Score: %0.64
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-4885
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen.... Read more
- EPSS Score: %0.32
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2015-4808
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In Filters, a different vulnerability than CVE-2015-6013, ... Read more
Affected Products : fusion_middleware- EPSS Score: %0.12
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
9.3
CRITICALCVE-2016-1929
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security No... Read more
Affected Products : hana- EPSS Score: %1.33
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
9.8
CRITICALCVE-2016-1928
Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978.... Read more
Affected Products : hana- EPSS Score: %37.33
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
9.8
CRITICALCVE-2016-1901
Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.... Read more
- EPSS Score: %4.36
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-1900
CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-... Read more
- EPSS Score: %0.65
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-1899
CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter... Read more
- EPSS Score: %0.65
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
6.5
MEDIUMCVE-2016-1867
The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.... Read more
Affected Products : jasper- EPSS Score: %0.46
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2015-5516
Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x before HF6, BIG-IP AAM 11.4.x, 11.5.x before 11.5.3 HF2 a... Read more
Affected Products : big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_global_traffic_manager big-ip_link_controller big-ip_local_traffic_manager big-ip_policy_enforcement_manager big-ip_edge_gateway +8 more products- EPSS Score: %1.62
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2015-5295
The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via t... Read more
- EPSS Score: %1.64
- Published: Jan. 20, 2016
- Modified: Apr. 12, 2025