Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in the Enterprise Manager Base Platform component : - Multiple flaws exist in the OpenSSL library bundled in the Discovery Framework subcomponent, specifically in the...

Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as noted in the July 2016 CPU advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid92542;...

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle Secure Global Desktop installed on the remote host is 4.63, 4.71, or 5.2 and is missing a security patch from the July 2016 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - An integer overflow condition exists in the X Server...

CVE-2016-5399

creationtimestamp| type| source ---|---|--- 2016-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40155...

CVE-2016-1609

creationtimestamp| type| source ---|---|--- 2016-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40161...

repositorio.utad.pt XSS vulnerability

Open Bug Bounty ID: OBB-168788 Description| Value ---|--- Affected Website:| repositorio.utad.pt Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Oracle Java SE Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 101, 7 Update 111, or 6 Update 121. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the CORBA subcomponent that allows an unauthenticated,...

Oracle Database Multiple Vulnerabilities (July 2016 CPU) (FREAK)

The remote Oracle Database Server is missing the July 2016 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists in the RDBMS HTTPS Listener package due to the suppo...

pyknet.net XSS vulnerability

Vulnerable URL: http://pyknet.net/submit.php?srchstring=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 71948 VIP website...

dgcp.gob.do XSS vulnerability

Vulnerable URL:...

lipklad.ru Open Redirect vulnerability

Vulnerable URL: http://lipklad.ru/go.php?http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

CVE-2016-3532

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...

CVE-2016-3491

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU. Oracle has not commente...

CVE-2016-3491

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU. Oracle has not commente...

CVE-2016-3535

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on...

Oracle JRockit R28.3.10 Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle JRockit installed on the remote Windows host is 28.3.10. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Networking subcomponent that allows a local attacker to impact integrity. CVE-2016-3485 - Multiple unspecified flaws exist in...

innovativity.org XSS vulnerability

Vulnerable URL: http://www.innovativity.org/moteur-de-recherche-innooo.php?typerecherche==%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Oracle WebLogic Server Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Web Container subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. CVE-2016-3445 - An unspecified flaw...

Oracle E-Business Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Wireless Framework subcomponent within the CRM Technical Foundation component that...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for July 2016 to address 276 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Oracle Ju...