U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
There are 232,775 matching records.
Displaying matches 153,941 through 153,960.
Vuln ID Summary CVSS Severity
CVE-2016-5498

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499.

Published: October 25, 2016; 10:29:32 AM -0400 		V3.0: 3.3 LOW
 V2.0: 2.1 LOW
CVE-2016-5497

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Published: October 25, 2016; 10:29:31 AM -0400 		V3.0: 6.4 MEDIUM
 V2.0: 4.4 MEDIUM
CVE-2016-5495

Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema.

Published: October 25, 2016; 10:29:30 AM -0400 		V3.0: 7.5 HIGH
 V2.0: 5.0 MEDIUM
CVE-2016-5493

Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:29:29 AM -0400 		V3.0: 4.2 MEDIUM
 V2.0: 4.9 MEDIUM
CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.

Published: October 25, 2016; 10:29:28 AM -0400 		V3.0: 7.1 HIGH
 V2.0: 3.6 LOW
CVE-2016-5491

Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:29:26 AM -0400 		V3.0: 8.2 HIGH
 V2.0: 5.8 MEDIUM
CVE-2016-5490

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect confidentiality via vectors related to INFRA.

Published: October 25, 2016; 10:29:25 AM -0400 		V3.0: 3.3 LOW
 V2.0: 2.1 LOW
CVE-2016-5489

Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.

Published: October 25, 2016; 10:29:24 AM -0400 		V3.0: 8.2 HIGH
 V2.0: 7.8 HIGH
CVE-2016-5488

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445.

Published: October 25, 2016; 10:29:23 AM -0400 		V3.0: 5.3 MEDIUM
 V2.0: 5.0 MEDIUM
CVE-2016-5487

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Published: October 25, 2016; 10:29:21 AM -0400 		V3.0: 5.3 MEDIUM
 V2.0: 4.6 MEDIUM
CVE-2016-5486

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.

Published: October 25, 2016; 10:29:20 AM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.9 MEDIUM
CVE-2016-5482

Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

Published: October 25, 2016; 10:29:19 AM -0400 		V3.0: 8.2 HIGH
 V2.0: 5.8 MEDIUM
CVE-2016-5481

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via vectors related to Core Services.

Published: October 25, 2016; 10:29:18 AM -0400 		V3.0: 3.7 LOW
 V2.0: 4.3 MEDIUM
CVE-2016-5480

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vectors related to Bash.

Published: October 25, 2016; 10:29:17 AM -0400 		V3.0: 2.8 LOW
 V2.0: 1.9 LOW
CVE-2016-5479

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows remote authenticated users to affect confidentiality via vectors related to INFRA.

Published: October 25, 2016; 10:29:15 AM -0400 		V3.0: 4.3 MEDIUM
 V2.0: 4.0 MEDIUM
CVE-2016-3562

Unspecified vulnerability in the RDBMS Security and SQL*Plus components in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality via vectors related to DBA.

Published: October 25, 2016; 10:29:14 AM -0400 		V3.0: 2.4 LOW
 V2.0: 4.3 MEDIUM
CVE-2016-3551

Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.

Published: October 25, 2016; 10:29:13 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 10.0 HIGH
CVE-2016-3505

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.

Published: October 25, 2016; 10:29:12 AM -0400 		V3.0: 8.8 HIGH
 V2.0: 9.0 HIGH
CVE-2016-3495

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

Published: October 25, 2016; 10:29:11 AM -0400 		V3.1: 4.9 MEDIUM
 V2.0: 6.8 MEDIUM
CVE-2016-3492

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

Published: October 25, 2016; 10:29:10 AM -0400 		V3.1: 6.5 MEDIUM
 V2.0: 6.8 MEDIUM