2017 CVEs (page 126)
Page 126 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-3515 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are aff… |
CVE-2017-3514 | High | 8.3 | 2017-04-24 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficu… |
CVE-2017-3513 | Low | 2.5 | 2017-04-24 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and… |
CVE-2017-3512 | High | 8.3 | 2017-04-24 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to e… |
CVE-2017-3511 | High | 7.7 | 2017-04-24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u13… |
CVE-2017-3510 | Critical | 9.6 | 2017-04-24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). The supported version that is… |
CVE-2017-3509 | Medium | 4.2 | 2017-04-24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141… |
CVE-2017-3508 | Critical | 9.1 | 2017-04-24 | Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are… |
CVE-2017-3507 | High | 7.3 | 2017-04-24 | Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). Supported versions that are affected are 12.1… |
CVE-2017-3506 | High | 7.4 | 2017-04-24 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6… |
CVE-2017-3505 | Medium | 5.1 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3504 | Medium | 5.1 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3503 | Critical | 9.9 | 2017-04-24 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Common… |
CVE-2017-3502 | Medium | 5.3 | 2017-04-24 | Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products (subcomponent: Receivables). The supported version that is a… |
CVE-2017-3501 | Medium | 6.1 | 2017-04-24 | Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9… |
CVE-2017-3500 | High | 8.7 | 2017-04-24 | Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are… |
CVE-2017-3499 | High | 7.5 | 2017-04-24 | Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware (subcomponent: Android Client). The supported version that is affected is prio… |
CVE-2017-3498 | Low | 3.3 | 2017-04-24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily "exp… |
CVE-2017-3497 | High | 7.3 | 2017-04-24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon). The supported version that is affecte… |
CVE-2017-3496 | Medium | 6.1 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2017-3495 | Medium | 4.7 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are… |
CVE-2017-3494 | Medium | 4.7 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions th… |
CVE-2017-3493 | High | 8.5 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2017-3492 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastruct… |
CVE-2017-3491 | Medium | 6.5 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and… |
CVE-2017-3490 | Low | 3.1 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and… |
CVE-2017-3489 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Support… |
CVE-2017-3488 | Medium | 6.5 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that… |
CVE-2017-3487 | Low | 3.1 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that… |
CVE-2017-3486 | High | 7.2 | 2017-04-24 | Vulnerability in the SQL*Plus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnera… |
CVE-2017-3485 | Medium | 6.8 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions t… |
CVE-2017-3484 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and… |
CVE-2017-3483 | Medium | 4.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and… |
CVE-2017-3482 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions t… |
CVE-2017-3481 | Medium | 4.3 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions t… |
CVE-2017-3480 | Medium | 4.7 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions t… |
CVE-2017-3479 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3478 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3477 | Medium | 4.2 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3476 | High | 7.1 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3475 | Medium | 5.0 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3474 | Low | 3.3 | 2017-04-24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone). The supported version that is affected is 11.3. Easily "explo… |
CVE-2017-3473 | Medium | 4.3 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3472 | High | 8.1 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management). Supported versio… |
CVE-2017-3471 | Medium | 4.7 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that… |
CVE-2017-3470 | Medium | 5.3 | 2017-04-24 | Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network). The supported version that… |
CVE-2017-3469 | Low | 3.7 | 2017-04-24 | Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption). Supported versions that are affected are 6.3.8… |
CVE-2017-3468 | Low | 3.1 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and e… |
CVE-2017-3467 | Low | 3.7 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.7.17 and earlier. Difficu… |
CVE-2017-3465 | Medium | 4.3 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and e… |
CVE-2017-3464 | Medium | 4.3 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 an… |
CVE-2017-3463 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and e… |
CVE-2017-3462 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and e… |
CVE-2017-3461 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and e… |
CVE-2017-3460 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.17 and earlier… |
CVE-2017-3459 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.17 and earlier. Eas… |
CVE-2017-3458 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily "e… |
CVE-2017-3457 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.17 and earlier. Easily "e… |
CVE-2017-3456 | Medium | 4.9 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 an… |
CVE-2017-3455 | Medium | 5.4 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.17 and e… |
CVE-2017-3454 | Medium | 5.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily… |
CVE-2017-3453 | Medium | 6.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6… |
CVE-2017-3452 | Medium | 6.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Eas… |
CVE-2017-3451 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are… |
CVE-2017-3450 | High | 7.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and… |
CVE-2017-3432 | High | 7.1 | 2017-04-24 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). Supported versions that are affecte… |
CVE-2017-3393 | High | 7.1 | 2017-04-24 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History). Supported versions that are a… |
CVE-2017-3337 | High | 7.1 | 2017-04-24 | Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12… |
CVE-2017-3331 | Medium | 6.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "ex… |
CVE-2017-3329 | High | 7.5 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). Supported versions that are affected are 5.5.54 and earlier… |
CVE-2017-3309 | High | 7.7 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6… |
CVE-2017-3308 | High | 7.7 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 an… |
CVE-2017-3307 | Low | 3.1 | 2017-04-24 | Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003… |
CVE-2017-3306 | High | 8.3 | 2017-04-24 | Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003… |
CVE-2017-3305 | Medium | 5.3 | 2017-04-24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6… |
CVE-2017-3304 | Medium | 5.4 | 2017-04-24 | Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 a… |
CVE-2017-3288 | Medium | 5.4 | 2017-04-24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that… |
CVE-2017-3254 | High | 7.6 | 2017-04-24 | Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are… |
CVE-2017-3237 | High | 7.8 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3234 | Critical | 9.8 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3233 | High | 7.5 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3232 | Medium | 5.5 | 2017-04-24 | Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is P… |
CVE-2017-3230 | High | 8.6 | 2017-04-24 | Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected… |
CVE-2017-8105 | Critical | 9.8 | 2017-04-24 | FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1… |
CVE-2017-8104 | Medium | 5.3 | 2017-04-24 | In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter. |
CVE-2017-8103 | Medium | 6.1 | 2017-04-24 | In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event. |
CVE-2017-8102 | Medium | 5.4 | 2017-04-24 | Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is rela… |
CVE-2017-8101 | High | 8.8 | 2017-04-24 | There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request. |
CVE-2017-8100 | Medium | 6.5 | 2017-04-24 | There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings. |
CVE-2017-8099 | High | 8.1 | 2017-04-24 | There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request. |
CVE-2017-8098 | Medium | 6.5 | 2017-04-24 | e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests… |
CVE-2017-7723 | Medium | 6.1 | 2017-04-24 | XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body. |
CVE-2017-5191 | Medium | 6.1 | 2017-04-24 | An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer heade… |
CVE-2017-2322 | Medium | 5.5 | 2017-04-24 | A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user t… |
CVE-2017-1000361 | High | 7.5 | 2017-04-24 | DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Com… |
CVE-2017-1000360 | Medium | 5.3 | 2017-04-24 | StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-md… |
CVE-2017-1000359 | Medium | 5.3 | 2017-04-24 | Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The test… |
CVE-2017-1000358 | Medium | 6.5 | 2017-04-24 | Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains th… |
CVE-2017-1000357 | High | 7.5 | 2017-04-24 | Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch… |
CVE-2017-2340 | Medium | 5.3 | 2017-04-24 | On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subsc… |