U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
There are 232,743 matching records.
Displaying matches 153,861 through 153,880.
Vuln ID Summary CVSS Severity
CVE-2016-5558

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.5.1 through 8.5.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different vulnerability than CVE-2016-5574, CVE-2016-5577, CVE-2016-5578, CVE-2016-5579, and CVE-2016-5588.

Published: October 25, 2016; 10:30:25 AM -0400 		V3.1: 8.6 HIGH
 V2.0: 7.5 HIGH
CVE-2016-5557

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:30:24 AM -0400 		V3.0: 8.2 HIGH
 V2.0: 5.8 MEDIUM
CVE-2016-5556

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

Published: October 25, 2016; 10:30:23 AM -0400 		V3.0: 9.6 CRITICAL
 V2.0: 9.3 HIGH
CVE-2016-5555

Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.

Published: October 25, 2016; 10:30:22 AM -0400 		V3.0: 9.1 CRITICAL
 V2.0: 6.5 MEDIUM
CVE-2016-5554

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.

Published: October 25, 2016; 10:30:21 AM -0400 		V3.0: 4.3 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2016-5553

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.

Published: October 25, 2016; 10:30:20 AM -0400 		V3.0: 5.0 MEDIUM
 V2.0: 4.7 MEDIUM
CVE-2016-5544

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.

Published: October 25, 2016; 10:30:19 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 7.2 HIGH
CVE-2016-5543

Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.

Published: October 25, 2016; 10:30:18 AM -0400 		V3.0: 6.1 MEDIUM
 V2.0: 5.8 MEDIUM
CVE-2016-5542

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

Published: October 25, 2016; 10:30:17 AM -0400 		V3.0: 3.1 LOW
 V2.0: 4.3 MEDIUM
CVE-2016-5540

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:30:16 AM -0400 		V3.0: 6.7 MEDIUM
 V2.0: 3.3 LOW
CVE-2016-5539

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Published: October 25, 2016; 10:30:15 AM -0400 		V3.0: 7.3 HIGH
 V2.0: 4.6 MEDIUM
CVE-2016-5538

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.

Published: October 25, 2016; 10:30:14 AM -0400 		V3.0: 6.7 MEDIUM
 V2.0: 7.2 HIGH
CVE-2016-5537

Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project.

Published: October 25, 2016; 10:30:13 AM -0400 		V3.0: 5.7 MEDIUM
 V2.0: 4.6 MEDIUM
CVE-2016-5536

Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-8281.

Published: October 25, 2016; 10:30:12 AM -0400 		V3.0: 7.6 HIGH
 V2.0: 6.5 MEDIUM
CVE-2016-5535

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Published: October 25, 2016; 10:30:10 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 7.5 HIGH
CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors.

Published: October 25, 2016; 10:30:09 AM -0400 		V3.0: 6.5 MEDIUM
 V2.0: 4.0 MEDIUM
CVE-2016-5533

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:30:08 AM -0400 		V3.0: 5.4 MEDIUM
 V2.0: 5.5 MEDIUM
CVE-2016-5532

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.

Published: October 25, 2016; 10:30:07 AM -0400 		V3.0: 5.3 MEDIUM
 V2.0: 5.0 MEDIUM
CVE-2016-5531

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices.

Published: October 25, 2016; 10:30:06 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 7.5 HIGH
CVE-2016-5530

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Integration Broker, a different vulnerability than CVE-2016-5529 and CVE-2016-8293.

Published: October 25, 2016; 10:30:05 AM -0400 		V3.0: 6.1 MEDIUM
 V2.0: 5.8 MEDIUM