Vulnerabilities > Oracle > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-08-07 CVE-2015-7702 Improper Input Validation vulnerability in multiple products
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).
network
low complexity
ntp oracle debian netapp redhat CWE-20
6.5
2017-06-22 CVE-2017-3631 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Oracle Solaris 11
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).
local
low complexity
oracle CWE-119
5.3
2017-06-22 CVE-2017-3630 Out-of-bounds Write vulnerability in Oracle Solaris 10/11
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).
local
low complexity
oracle CWE-787
5.3
2017-05-29 CVE-2017-9287 Double Free vulnerability in multiple products
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability.
network
low complexity
openldap debian redhat mcafee oracle CWE-415
6.5
2017-04-24 CVE-2017-3619 Unspecified vulnerability in Oracle Automatic Service Request
Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).
local
low complexity
oracle
5.5
2017-04-24 CVE-2017-3600 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).
network
high complexity
oracle redhat debian mariadb
6.6
2017-04-24 CVE-2017-3597 Unspecified vulnerability in Oracle Webcenter Sites
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).
network
low complexity
oracle
5.7
2017-04-24 CVE-2017-3594 Unspecified vulnerability in Oracle Webcenter Sites
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).
network
high complexity
oracle
5.9
2017-04-24 CVE-2017-3592 Unspecified vulnerability in Oracle Payroll
Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager).
network
low complexity
oracle
6.5
2017-04-24 CVE-2017-3586 Unspecified vulnerability in Oracle Mysql Connectors 2.1.0/2.1.8
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J).
network
low complexity
oracle
6.4