23241 matches found
CVE-2016-3477
Disclaimer: This data contains information about vulnerable...
CVE-2016-3503
CVE-2016-3503 is an Oracle Java SE vulnerability described as an unspecified issue in the Install component that can affect confidentiality, integrity, and availability for Oracle Java SE 6u115, 7u101, and 8u92. IBM-related documents map this CVE to multiple IBM advisories (e.g., RSA family, IBM ...
CVE-2016-3484
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and integrity via unknown vectors...
CVE-2016-5452
CVE-2016-5452 affects Oracle Solaris 11.3 Verified Boot subcomponent. A local attacker could affect confidentiality by exploiting Verified Boot vulnerabilities; CVSS 3.0 indicates LOCAL, LOW complexity, LOW privileges required, with HIGH confidentiality impact. Connected sources confirm the issue...
CVE-2016-5443
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors related to Server: Connection...
CVE-2016-3488
CVE-2016-3488 affects Oracle Database Server 12.1.0.2, specifically the DB Sharding component. The available connected sources confirm an unspecified vulnerability that local users can impact integrity via unknown vectors. The documentation does not specify the exact root cause, affected subcompo...
CVE-2016-5469
CVE-2016-5469 is an unspecified vulnerability affecting Oracle Solaris 11.3, with the kernel as the affected component. The issue allows local users to impact availability via kernel-related vectors. No root cause, affected subcomponents, or remediation details are provided in the connected docum...
CVE-2016-5443
CVE-2016-5443 is a vulnerability in Oracle MySQL 5.7.12 and earlier that allows local users to affect availability via the Server: Connection path. The connected advisories confirm an official patch path: in Ubuntu USN-3040-1, MySQL updated to 5.7.13 (and other series to newer versions) to addres...
CVE-2016-5471
CVE-2016-5471 is an unspecified vulnerability in Oracle Solaris 11.3 that allows local users to affect availability via the Kernel. It is distinct from CVE-2016-3497 and CVE-2016-5469. The description does not provide a concrete root cause, affected subcomponents, or a remediation; no exploit det...
CVE-2016-3477
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser...
CVE-2016-5472
CVE-2016-5472 affects Oracle PeopleSoft Products (PeopleSoft Enterprise PeopleTools) 8.54 and 8.55, specifically the Install and Packaging subcomponent. The vulnerability is described as unspecified, allowing local users to impact confidentiality, integrity, and availability. Root cause and exact...
CVE-2016-3477
CVE-2016-3477 affects Oracle MySQL Server (versions before 5.5.50, 5.6 before 5.6.30, 5.7 before 5.7.12) and MariaDB (before 5.5.50, 10.0.x before 10.0.26, 10.1.x before 10.1.15). The vulnerability is in the Server: Parser component and can allow a local user to impact confidentiality, integrity,...
CVE-2016-3477
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
CVE-2016-3488: Undefined Security Weakness
Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-05386)
Oracle MySQL Server is a lightweight relational database system. A security vulnerability exists in Oracle MySQL Server 5.7.12 and earlier versions, which can be exploited by unauthenticated local users to affect availability...
CVE-2016-3484: Undefined Security Weakness
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and integrity via unknown vectors...
PT-2016-5523
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u115, 7u101, and 8u92 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning the Install component, allowing local users to exploit it. Recommendations For Oracl...
perl -- local arbitrary code execution
Sawyer X reports: Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . period characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory...