VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2015-4748Jul 16, 2015
    Sun Corporation
    Java SE
    risk 0.04cvss —epss 0.45

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

  • CVE-2015-4024Jun 9, 2015
    PHP
    PHP
    risk 0.04cvss —epss 0.50

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an…

  • CVE-2014-2477Jul 17, 2014
    Oracle Corporation
    VM Virtualbox
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than…

  • CVE-2014-2880Apr 17, 2014
    Oracle Corporation
    Identity Manager
    risk 0.04cvss —epss 0.08

    Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a…

  • CVE-2014-2399Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.

  • CVE-2014-0983Mar 31, 2014
    Oracle Corporation
    Virtualbox
    risk 0.04cvss —epss 0.08

    Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary…

  • CVE-2014-0379Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

  • CVE-2014-0372Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM…

  • CVE-2012-5627Oct 1, 2013
    MariaDB
    MariaDB
    risk 0.04cvss —epss 0.11

    Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force…

  • CVE-2013-3803Jul 17, 2013
    Oracle Corporation
    Hyperion
    risk 0.04cvss —epss 0.06

    Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Intelligence Service.

  • CVE-2013-2416Apr 17, 2013
    Oracle Corporation
    Jre
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

  • CVE-2013-1861Mar 28, 2013
    MariaDB
    MariaDB
    risk 0.04cvss —epss 0.19

    MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that…

  • CVE-2012-5615Dec 3, 2012
    MariaDB
    MariaDB
    risk 0.04cvss —epss 0.15

    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid…

  • CVE-2012-5614Dec 3, 2012
    MariaDB
    MariaDB
    risk 0.04cvss —epss 0.13

    Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique,…

  • CVE-2011-5167Sep 15, 2012
    Tidestone
    Formula One Activex Control
    risk 0.04cvss —epss 0.10

    Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName…

  • CVE-2012-0547Aug 30, 2012
    Sun Corporation
    Jre
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be…

  • CVE-2009-5026Aug 17, 2012
    MySQL
    MySQL
    risk 0.04cvss —epss 0.08

    The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

  • CVE-2012-0551May 3, 2012
    Sun Corporation
    Jre
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect…

  • CVE-2012-0550May 3, 2012
    Oracle Corporation
    Glassfish Server
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.

  • CVE-2011-1511Jul 20, 2011
    Oracle Corporation
    Sun Products Suite
    risk 0.04cvss —epss 0.15

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration.

  • CVE-2010-4437Jan 19, 2011
    Oracle Corporation
    Fusion Middleware
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.

  • CVE-2010-4435Jan 19, 2011
    Sun Corporation
    Sunos
    risk 0.04cvss —epss 0.14

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has…

  • CVE-2010-3599Jan 19, 2011
    Oracle Corporation
    Fusion Middleware
    risk 0.04cvss —epss 0.16

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the…

  • CVE-2010-3595Jan 19, 2011
    Oracle Corporation
    Fusion Middleware
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011…

  • CVE-2010-3591Jan 19, 2011
    Oracle Corporation
    Fusion Middleware
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information…

  • CVE-2010-3683Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.

  • CVE-2010-3682Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.11

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in…

  • CVE-2010-3681Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.

  • CVE-2010-3680Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.

  • CVE-2010-3679Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.

  • CVE-2010-3678Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.12

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.

  • CVE-2010-3676Jan 11, 2011
    MySQL
    MySQL
    risk 0.04cvss —epss 0.09

    storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage…

  • CVE-2010-3573Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.04cvss —epss 0.11

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…

  • CVE-2010-2415Oct 14, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.

  • CVE-2010-2375Jul 13, 2010
    Bea
    WebLogic Server
    risk 0.04cvss —epss 0.07

    Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and…

  • CVE-2010-2008Jul 13, 2010
    MySQL
    MySQL
    risk 0.04cvss —epss 0.09

    MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence,…

  • CVE-2010-0870Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_PUBLISH.

  • CVE-2010-0866Apr 13, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.11

    Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0838Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.04cvss —epss 0.15

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…

  • CVE-2010-0071Jan 13, 2010
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-4019Nov 30, 2009
    MySQL
    MySQL
    risk 0.04cvss —epss 0.16

    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function,…

  • CVE-2009-1970Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.12

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.

  • CVE-2009-1963Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.

  • CVE-2009-1020Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-1019Jul 14, 2009
    Oracle Corporation
    Database Server
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2009-2446Jul 13, 2009
    MySQL
    MySQL
    risk 0.04cvss —epss 0.11

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string…

  • CVE-2009-1553May 6, 2009
    Sun Corporation
    GlassFish Enterprise Server
    risk 0.04cvss —epss 0.08

    Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3)…

  • CVE-2009-0991Apr 15, 2009
    Oracle Corporation
    Database 9i
    risk 0.04cvss —epss 0.08

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970.

  • CVE-2009-0978Apr 15, 2009
    Oracle Corporation
    Workspace Manager
    risk 0.04cvss —epss 0.18

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0975.

  • CVE-2009-0819Mar 5, 2009
    MySQL
    MySQL
    risk 0.04cvss —epss 0.10

    sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion…

Page 121 of 201