High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-10	CVE-2020-9315	Missing Authentication for Critical Function vulnerability in Oracle Iplanet web Server 7.0/7.0.27 PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. network low complexity oracle CWE-306	7.5
2016-03-13	CVE-2016-1950	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate. network low complexity mozilla oracle apple opensuse CWE-119	8.8