Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2016-04-21 CVE-2016-2293 Permissions, Privileges, and Access Controls vulnerability in Accuenergy Acuvim II NET Firmware and Acuvim IIR NET Firmware
The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL.
network
low complexity
accuenergy CWE-264
8.6
2016-04-21 CVE-2016-2280 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Honeywell Uniformance Process History Database R310/R320/R321
Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors.
network
low complexity
honeywell CWE-119
7.5
2016-04-21 CVE-2016-1367 Resource Management Errors vulnerability in Cisco Adaptive Security Appliance Software 9.4.1
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248.
network
low complexity
cisco CWE-399
7.5
2016-04-21 CVE-2016-1364 Improper Input Validation vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.
network
low complexity
cisco CWE-20
7.5
2016-04-21 CVE-2016-1362 Resource Management Errors vulnerability in Cisco Aireos
Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747.
network
low complexity
cisco CWE-399
7.5
2016-04-21 CVE-2016-0694 Unspecified vulnerability in Oracle Berkeley DB
Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0692, and CVE-2016-3418.
local
low complexity
oracle
7.8
2016-04-21 CVE-2016-0692 Unspecified vulnerability in Oracle Berkeley DB
Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0694, and CVE-2016-3418.
local
low complexity
oracle
7.8
2016-04-21 CVE-2016-0689 Unspecified vulnerability in Oracle Berkeley DB
Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0692, CVE-2016-0694, and CVE-2016-3418.
local
low complexity
oracle
7.8
2016-04-21 CVE-2016-0682 Unspecified vulnerability in Oracle Berkeley DB
Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0689, CVE-2016-0692, CVE-2016-0694, and CVE-2016-3418.
local
low complexity
oracle
7.8
2016-04-21 CVE-2016-0681 Unspecified vulnerability in Oracle Olap 11.2.0.4/12.1.0.1/12.1.0.2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unspecified vectors.
local
low complexity
oracle
7.8