Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2016-04-21 CVE-2016-2004 Missing Authentication for Critical Function vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.
network
low complexity
hp CWE-306
critical
9.8
2016-04-21 CVE-2016-1367 Resource Management Errors vulnerability in Cisco Adaptive Security Appliance Software 9.4.1
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248.
network
low complexity
cisco CWE-399
7.5
2016-04-21 CVE-2016-1364 Improper Input Validation vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.
network
low complexity
cisco CWE-20
7.5
2016-04-21 CVE-2016-1363 Resource Management Errors vulnerability in Cisco Wireless LAN Controller Software
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.
network
low complexity
cisco CWE-399
critical
9.8
2016-04-21 CVE-2016-1362 Resource Management Errors vulnerability in Cisco Aireos
Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747.
network
low complexity
cisco CWE-399
7.5
2016-04-21 CVE-2016-0700 Unspecified vulnerability in Oracle Weblogic Server 10.3.6.0.0/12.1.2.0.0/12.1.3.0.0
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675.
network
low complexity
oracle
6.1
2016-04-21 CVE-2016-0699 Unspecified vulnerability in Oracle Flexcube Direct Banking 12.0.2/12.0.3
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component.
network
low complexity
oracle
critical
9.1
2016-04-21 CVE-2016-0698 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.53/8.54/8.55
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423.
network
low complexity
oracle
5.4
2016-04-21 CVE-2016-0697 Unspecified vulnerability in Oracle Application Object Library
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors.
local
low complexity
oracle
6.0
2016-04-21 CVE-2016-0696 Unspecified vulnerability in Oracle Weblogic Server 10.3.6.0.0
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
network
low complexity
oracle
5.4