VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2007-0882Feb 12, 2007
    Sun Corporation
    Sunos
    risk 0.11cvss —epss 0.98

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts,…

  • CVE-2002-0840Oct 11, 2002
    Apache
    HTTP Server
    risk 0.11cvss —epss 0.94

    Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host:…

  • CVE-2016-0492Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.10cvss —epss 0.93

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different…

  • CVE-2014-0226Jul 20, 2014
    Apache
    HTTP Server
    risk 0.10cvss —epss 0.86

    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers…

  • CVE-2013-1488Mar 8, 2013
    Openjdk
    OpenJDK
    risk 0.10cvss —epss 0.87

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as…

  • CVE-2013-1493Mar 5, 2013
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.86

    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster…

  • CVE-2010-4452Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.10cvss —epss 0.83

    Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and…

  • CVE-2010-3563Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.84

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU.…

  • CVE-2010-0094Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.82

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2008-3257Jul 22, 2008
    Bea
    WebLogic Server
    risk 0.10cvss —epss 0.84

    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP…

  • CVE-2008-0226Jan 10, 2008
    MySQL
    MySQL
    risk 0.10cvss —epss 0.92

    Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

  • CVE-2002-0656Aug 12, 2002
    OpenSSL Project
    OpenSSL
    risk 0.10cvss —epss 0.90

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

  • CVE-2001-0499Jul 21, 2001
    Oracle Corporation
    Oracle8i
    risk 0.10cvss —epss 0.85

    Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.

  • CVE-2016-0491Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.09cvss —epss 0.81

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous…

  • CVE-2013-2460Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.09cvss —epss 0.70

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous…

  • CVE-2012-5088Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.09cvss —epss 0.79

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2012-1675May 8, 2012
    Oracle Corporation
    Database Server
    risk 0.09cvss —epss 0.78

    The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary…

  • CVE-2011-5035Dec 30, 2011
    Oracle Corporation
    Glassfish
    risk 0.09cvss —epss 0.69

    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which…

  • CVE-2011-3556Oct 19, 2011
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.76

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2010-4417Jan 19, 2011
    Oracle Corporation
    Beehive
    risk 0.09cvss —epss 0.79

    Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-3600Jan 19, 2011
    Oracle Corporation
    Database Server
    risk 0.09cvss —epss 0.77

    Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…

  • CVE-2010-3552Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.81

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0886Apr 20, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.70

    Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0842Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.78

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2009-4484Dec 30, 2009
    MySQL
    MySQL
    risk 0.09cvss —epss 0.70

    Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to…

  • CVE-2009-1979Oct 22, 2009
    Oracle Corporation
    Database Server
    risk 0.09cvss —epss 0.76

    Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. …

  • CVE-2009-1977Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.09cvss —epss 0.73

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2004-0230Aug 18, 2004
    Microsoft
    Windows 2000
    risk 0.09cvss —epss 0.81

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,…

  • CVE-2003-0780Sep 22, 2003
    MySQL
    MySQL
    risk 0.09cvss —epss 0.75

    Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.

  • CVE-2002-1337Mar 7, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.09cvss —epss 0.72

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

  • CVE-2002-0965Oct 4, 2002
    Oracle Corporation
    Database Server
    risk 0.09cvss —epss 0.70

    Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.

  • CVE-2014-6593Jan 21, 2015
    Sun Corporation
    Java SE
    risk 0.08cvss —epss 0.67

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

  • CVE-2013-5880Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.08cvss —epss 0.60

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

  • CVE-2013-5795Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.08cvss —epss 0.59

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

  • CVE-2013-3763Jul 17, 2013
    Oracle Corporation
    Fusion Middleware
    risk 0.08cvss —epss 0.60

    Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.

  • CVE-2013-1559Apr 17, 2013
    Oracle Corporation
    Fusion Middleware
    risk 0.08cvss —epss 0.59

    Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server.

  • CVE-2012-5067Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.08cvss —epss 0.64

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

  • CVE-2012-1533Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.69

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-0549May 3, 2012
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.08cvss —epss 0.59

    Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and availability, related to Desktop API.

  • CVE-2012-0500Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.59

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2011-0807Apr 20, 2011
    Sun Corporation
    Java System Application Server
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.

  • CVE-2009-1978Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.65

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2008-5457Jan 14, 2009
    Bea
    BEA Product Suite
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…

  • CVE-2008-5444Jan 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.

  • CVE-2008-4008Oct 14, 2008
    Bea
    WebLogic Server Plugins for Apache
    risk 0.08cvss —epss 0.56

    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the…

  • CVE-2004-2115Dec 31, 2004
    Oracle Corporation
    HTTP Server
    risk 0.08cvss —epss 0.58

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

  • CVE-2003-0727Oct 20, 2003
    Oracle Corporation
    Database Server
    risk 0.08cvss —epss 0.69

    Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.

  • CVE-2014-2424Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.07cvss —epss 0.48

    Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

  • CVE-2013-5877Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.07cvss —epss 0.55

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

  • CVE-2012-5081Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.07cvss —epss 0.45

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.

Page 119 of 201