CVE-2016-1843

The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-0341

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Denial of Service Vulnerability (CNVD-2016-02554)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02575)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability in the Console...

Unspecified vulnerability in Oracle E-Business Suite CRM Wireless component (CNVD-2016-02569)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. An unspecified vulnerability in the Call Phone Number Page subcomponent of the Oracle CRM Wireless component of Oracle E-Business Suite version 12.1.3...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2016-02557)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability exists in the Fusion HR Talent...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Configurator Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation, of which Oracle Configurator is a configuration component that integrates order management, quoting and selling. An unspecified vulnerability in the JRAD Heartbeat subcomponent of the Oracle...

Unspecified Vulnerability in Oracle E-Business Common Applications Calendar Component

Oracle E-Business Suite is a suite of fully integrated, global business management software from Oracle Corporation. Oracle Common Application Calendar CAC, also known as Oracle Common Application is one of the components that can simplify the management of daily activities, appointments, and...

Unspecified Vulnerability in Oracle E-Business Suite Field Service Component

Oracle E-Business Suite is a suite of fully integrated, global business management software from Oracle Corporation, of which Oracle Field Service formerly Service Online is a component that improves customer satisfaction by automating the scheduling of field technician calls to remote locations...

Oracle Fusion Middleware HTTP Server Component Data Read Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. Oracle HTTP Server is one of the open source technology based on Apache Web server components. A data read vulnerability exists...

Unspecified Vulnerability in Oracle Fusion Middleware Business Intelligence Enterprise Edition Component

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments, Oracle Business Intelligence Enterprise Edition is one of the business intelligence components. An unspecified vulnerability in...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02561)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability exists in the Portal subcomponent of th...

Unspecified Vulnerability in Oracle E-Business Suite CRM Wireless Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. An unspecified vulnerability in the Person Address Page subcomponent of the Oracle CRM Wireless component of Oracle E-Business Suite version 12.1.3 ca...

Unspecified Vulnerability in Oracle E-Business Suite Applications Framework Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Applications Framework OA Framework, OAF is one of the business development platform components. An unspecified vulnerability exists in the OAF...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

Oracle Java SE, Java SE Embedded and JRockit Security Subcomponent Information Disclosure Vulnerability

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a powerful, reliable, and portable...

SAP NetWeaver Java AS XML DAS Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A security vulnerability exists in SAP NetWeaver Java AS where the XML DAS service does not check authorization, which can be exploited by remote attackers to gai...

Atlassian Bamboo Information Disclosure Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x versions prior to 5.10.0 in the service, which can be exploited by remote attackers to obtain sensitive information,...