14 matches found
CVE-2016-2381
CVE-2016-2381 describes a Perl taint protection bypass in child processes caused by duplicate environment variables in envp. This context-dependent issue could allow an attacker to bypass taint checks, potentially enabling unintended behavior or exposure in vulnerable Perl workflows. Public refer...
CVE-2016-0499
CVE-2016-0499 affects Oracle Database Server’s Java VM component in 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors; exploitation details are not provided in the included documents. No...
CVE-2016-0472
CVE-2016-0472 affects Oracle Database Server’s XDB - XML Database component. It targets versions 11.2.0.4, 12.1.0.1, and 12.1.0.2, where an unspecified vulnerability allows remote authenticated users to impact confidentiality and availability via unknown vectors. The provided docs do not specify ...
CVE-2015-4923
CVE-2015-4923 is an unspecified vulnerability in the XML Developer�B4s Kit for C component of Oracle Database Server, affecting versions 11.2.0.4, 12.1.0.1 and 12.1.0.2. Connected sources attribute the issue to a vulnerability that could allow remote authenticated users to affect availability via...
CVE-2016-5555
CVE-2016-5555 affects Oracle Database Server 11.2.0.4 and 12.1.0.2, via the OJVM component. The vulnerability allows remote administrators to impact confidentiality, integrity, and availability from unknown vectors. NVD CVSSv3 base score is 9.1 (CRITICAL); CVSSv2 is 6.5 (MEDIUM) with partial impa...
CVE-2015-4921
CVE-2015-4921 affects Oracle Database Server’s Database Vault component on versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. It enables remote authenticated users to impact data integrity via unknown vectors (root cause not disclosed). Several connected sources reference this CVE as part of Oracle’s Jan...
CVE-2016-0461
CVE-2016-0461 affects Oracle Database Server XDB (XML Database) components. Affected are Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified, allowing remote authenticated users to affect availability via unknown vectors. No exploit details are p...
CVE-2016-0467
The connected IBM OpenPages bulletin ties CVE-2016-0467 to an Oracle Database Server Security component vulnerability. It states this unspecified security issue has no confidentiality impact, partial integrity impact, and no availability impact (CVSS Base Score 4, vector AV:N/AC:L/Au:S/C:N/I:P/A:...
CVE-2016-3562
Oracle Database Server (RDBMS Security and SQL*Plus components) is affected by CVE-2016-3562 in versions 11.2.0.4 and 12.1.0.2. The vulnerability is described as unspecified and allows remote administrators to affect confidentiality via vectors related to DBA. The NVD entry lists CVSSv3 impact as...
CVE-2015-4925
The CVE-2015-4925 entry concerns Oracle Database Server’s Workspace Manager in version 11.2.0.4, described as an unspecified vulnerability that could, via unknown vectors, affect confidentiality, integrity, and availability when accessed by remote authenticated users. The linked records reaffirm ...
CVE-2016-5505
CVE-2016-5505 affects Oracle Database Server (RDBMS Programmable Interface) in versions 11.2.0.4 and 12.1.0.2. The vulnerability is local and allows an attacker to affect confidentiality via unknown vectors; the CVSSv3 base score is 5.5 (Medium) with local access, low attack complexity, and no us...
CVE-2016-5499
Technical details about CVE-2016-5499 are not provided in the supplied documents; no affected product versions, root cause, or remediation are disclosed. Monitor for updates.
CVE-2016-5516
CVE-2016-5516 affects Oracle Database Server 12.1.0.2, specifically the Kernel PDB component. It is a local-denial-of-service style issue where a local user can affect availability via unknown vectors. The available connected documentation places this vulnerability among Oracle’s October 2016 CPU...