Lucene search
+L

10338 matches found

Talos
Talos
•added 2016/07/19 12:00 a.m.•54 views

Oracle OIT IX SDK TIFF ExtraSamples Code Execution Vulnerabiity

Talos Vulnerability Report TALOS-2016-0103 Oracle OIT IX SDK TIFF ExtraSamples Code Execution Vulnerabiity July 19, 2016 CVE Number CVE-2016-3581 Description While parsing a specially crafted TIFF file, a parser confussion can lead to a heap buffer overflow resulting in out of bounds memory...

9CVSS8.3AI score0.0393EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•15 views

The vulnerability of the Oracle Fusion Middleware software platform allows a malicious actor to execute arbitrary scripts outside of the application’s catalog.

A vulnerability in the Oracle Fusion Middleware software exists due to an error that occurs when processing a unified resource identifier called Request-URI. Exploiting this vulnerability allows a malicious individual to access arbitrary scripts outside of the application’s catalog, using...

4.3CVSS5.5AI score0.01036EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2016/06/15 12:00 a.m.•35 views

Microsoft Exchange Server Multiple Vulnerabilities (3160339)

This host is missing an important security update according to Microsoft Bulletin MS16-079. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

10CVSS6.5AI score0.08383EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/06/15 12:00 a.m.•126 views

MS16-079: Security Update for Microsoft Exchange Server (3160339)

The remote Microsoft Exchange Server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple stack buffer overflow conditions exist in the Oracle Outside In subcomponent due to improper validation of user-supplied input. An unauthenticated, remote attacke...

10CVSS6.9AI score0.22554EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2016/06/14 7:00 a.m.•39 views

Oracle Outside in Libraries Elevation of Privilege Vulnerabilities

This security update addresses the following vulnerabilities, which are described in Oracle Critical Patch Update Advisory - January 2016: CVE-2015-6013: Oracle Outside In 8.5.2 WK4 stack buffer overflow CVE-2015-6014: Oracle Outside In 8.5.2 DOC stack buffer overflow CVE-2015-6015: Oracle OIT...

10CVSS6.6AI score0.08383EPSS
SaveExploits0
CNVD
CNVD
•added 2016/04/24 12:00 a.m.•14 views

Joyent Node.js tar Sensitive Information Disclosure Vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in the Joyent Node.js tar allows remote attackers to overwrite and extract targets outside of a specific directory via a symbolic link attack...

7.5CVSS7.8AI score0.04912EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/04/22 12:00 a.m.•19 views

Oracle Fusion Middleware Technology Component Denial of Service Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. A denial of service vulnerability exists in the Outside In Filters subcomponent of the Technology component of Oracle Fusion Middleware, which can be...

9CVSS8.4AI score0.03122EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/21 11:00 a.m.•18 views

CVE-2016-3455

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

8.6CVSS7.3AI score0.03122EPSS
SaveExploits0References3
NVD
NVD
•added 2016/04/21 11:00 a.m.•38 views

CVE-2016-3455

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

9CVSS7.5AI score0.03122EPSS
SaveExploits0References3
Prion
Prion
•added 2016/04/21 11:00 a.m.•28 views

Buffer overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

9CVSS6.3AI score0.03122EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/04/21 10:00 a.m.•44 views

CVE-2016-3455

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

7.8AI score0.03122EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2016/04/21 10:00 a.m.•15 views

CVE-2016-3455

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

6.1AI score0.03122EPSS
SaveExploits0References3
CVE
CVE
•added 2016/04/21 10:00 a.m.•69 views

CVE-2016-3455

CVE-2016-3455 is an unspecified vulnerability in Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware 8.5.0–8.5.2. Public sources detail high impact across confidentiality, integrity, and availability. IBM advisories tie the issue to IBM FileNet Content Manager (5.1....

9CVSS7.7AI score0.03122EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/21 12:00 a.m.•5 views

CVE-2016-3455: Undefined Security Weakness

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters...

9CVSS7.9AI score0.03122EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2016/04/21 12:00 a.m.•3 views

PT-2016-5477

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.5.0 through 8.5.2 Description The issue affects confidentiality, integrity, and availability. It is related to vectors involving Outside In Filters in the Oracle Outside In Technology component...

9CVSS0.03122EPSS
SaveExploits0References5
ThreatPost
ThreatPost
•added 2016/03/22 12:42 p.m.•14 views

Attention Turns to FBI's 'Outside Party'

The FBI’s motion for a continuance in its case against Apple has opened a new avenue in this debate as to the identity and means by which the mystery “outside party” could unlock terrorist Syed Farook’s iPhone. Late yesterday afternoon, the FBI filed a motion to vacate a hearing scheduled for tod...

6.6AI score
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2016/03/02 12:00 a.m.•16 views

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created WK4 file...

10CVSS7AI score0.08383EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/03/02 12:00 a.m.•20 views

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created Paradox DB file...

10CVSS6.8AI score0.08383EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/03/02 12:00 a.m.•22 views

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to cause a service failure using a specially created DOC file...

10CVSS7AI score0.08383EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
•added 2016/01/24 12:58 a.m.•11 views

opensecrets.org XSS vulnerability

Vulnerable URL: http://www.opensecrets.org/outsidespending/summ.php?chrt=V=S"...

6.9AI score
SaveExploits0
Rows per page
Query Builder