Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-04-25 CVE-2016-2331 Credentials Management vulnerability in Systech Syslink Sl-1000 Modular Gateway Firmware
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.
network
low complexity
systech CWE-255
critical
9.8
2016-04-21 CVE-2016-3466 Unspecified vulnerability in Oracle Field Service 12.1.1/12.1.2/12.1.3
Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless.
network
low complexity
oracle
critical
9.1
2016-04-21 CVE-2016-3454 Unspecified vulnerability in Oracle Database 11.2.0.4/12.1.0.1/12.1.0.2
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
network
high complexity
oracle
critical
9.0
2016-04-21 CVE-2016-3443 Unspecified vulnerability in Oracle JDK and JRE
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
network
low complexity
oracle
critical
9.6
2016-04-21 CVE-2016-3427 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
network
low complexity
oracle canonical debian netapp apache redhat suse opensuse
critical
9.8
2016-04-21 CVE-2016-2008 Unspecified vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
hp
critical
9.8
2016-04-21 CVE-2016-2007 Unspecified vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.
network
low complexity
hp
critical
9.8
2016-04-21 CVE-2016-2006 Unspecified vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.
network
low complexity
hp
critical
9.8
2016-04-21 CVE-2016-2005 Unspecified vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.
network
low complexity
hp
critical
9.8
2016-04-21 CVE-2016-2004 Missing Authentication for Critical Function vulnerability in HP Data Protector
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.
network
low complexity
hp CWE-306
critical
9.8