Archive

July 2016

Vulnerabilities first published in this month (UTC), newest first.

← June 2016 2016 / July August 2016 →

All Critical High Medium Low Exploited only Public exploit

709 results · Feed

Unscored —

CVE-2016-5457

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote au…

Jul 21, 2016
Unscored —

CVE-2016-5454

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vector…

Jul 21, 2016
Unscored —

CVE-2016-5463

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and I…

Jul 21, 2016
Unscored —

CVE-2016-5447

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote au…

Jul 21, 2016
Unscored —

CVE-2016-5443

Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors rela…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu

Jul 21, 2016
Unscored —

CVE-2016-5446

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote at…

Jul 21, 2016
Unscored —

CVE-2016-5470

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.5…

Jul 21, 2016
Unscored —

CVE-2016-5475

Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and…

Jul 21, 2016
Unscored —

CVE-2016-5460

Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP…

Jul 21, 2016
Unscored —

CVE-2016-5461

Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP…

Jul 21, 2016
Unscored —

CVE-2016-5445

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote at…

Jul 21, 2016
Unscored —

CVE-2016-5474

Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and…

Jul 21, 2016
Unscored —

CVE-2016-5468

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and I…

Jul 21, 2016
Unscored —

CVE-2016-5471

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to K…

Jul 21, 2016
Unscored —

CVE-2016-5444

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb Ubuntu Alpine

Jul 21, 2016
Unscored —

CVE-2016-5451

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and I…

Jul 21, 2016
Unscored —

CVE-2016-5476

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2…

Jul 21, 2016
Unscored —

CVE-2016-5450

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and I…

Jul 21, 2016
Unscored —

CVE-2016-5452

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related t…

Jul 21, 2016
Unscored —

CVE-2016-5439

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to aff…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mysql-5.6 Ubuntu

Jul 21, 2016
Unscored —

CVE-2016-5472

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.5…

Jul 21, 2016
Unscored —

CVE-2016-5477

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows r…

Jul 21, 2016
Unscored —

CVE-2016-2775 EPSS 63%

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres optio…

bind9 bind9 Debian Ubuntu

Jul 19, 2016
Unscored —

CVE-2016-5653

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute ar…

Jul 19, 2016
Unscored —

CVE-2016-5080 EPSS 10%

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allo…

Jul 19, 2016
Unscored —

CVE-2016-5654

Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that…

Jul 19, 2016
Unscored —

CVE-2016-5655

Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle atta…

Jul 19, 2016
Unscored —

CVE-2015-8947

hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-r…

harfbuzz harfbuzz Debian Ubuntu

Jul 19, 2016
Unscored —

CVE-2016-5386

Improper input validation in net/http and net/http/cgi

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow…

golang stdlib golang-1.6 Ubuntu Azure Linux Go

Jul 19, 2016
Unscored —

CVE-2016-5387 EPSS 56%

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from …

apache2 apache2 apache2 Debian Ubuntu Alpine

Jul 19, 2016
High 8.1

CVE-2016-5388 EPSS 51%

Improper Access Control in Apache Tomcat

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might…

tomcat8 tomcat7 tomcat6 org.apache.tomcat:tomcat-catalina Ubuntu Maven

Jul 19, 2016
High 8.1

CVE-2016-5385 EPSS 50%

HTTP Proxy header vulnerability

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redi…

php5 php7.0 drupal/core guzzlehttp/guzzle Ubuntu Packagist

Jul 19, 2016
Unscored —

CVE-2016-0321

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credentia…

Jul 17, 2016
Unscored —

CVE-2016-0393

IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote at…

Jul 17, 2016
Unscored —

CVE-2016-1459

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of…

Jul 17, 2016
Unscored —

CVE-2016-1448

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack th…

Jul 17, 2016
Unscored —

CVE-2016-3039

IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of…

Jul 17, 2016
Unscored —

CVE-2015-1977

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-…

Jul 15, 2016
Unscored —

CVE-2016-0339

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles s…

Jul 15, 2016
Unscored —

CVE-2016-0340

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles s…

Jul 15, 2016