VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2012-3183Oct 17, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to…

  • CVE-2012-5383Oct 11, 2012
    Oracle Corporation
    MySQL
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the "C:\MySQL\MySQL Server 5.5\bin" directory, which may be added to…

  • CVE-2012-1770Jul 17, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766,…

  • CVE-2012-1769Jul 17, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766,…

  • CVE-2012-1744Jul 17, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent users to affect availability via unknown vectors related to Outside In Filters.

  • CVE-2011-2260Jul 20, 2011
    Oracle Corporation
    Sun Products Suite
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.

  • CVE-2011-0836Apr 20, 2011
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.

  • CVE-2011-0902Feb 7, 2011
    Sun Corporation
    SunScreen Firewall
    risk 0.03cvss —epss 0.02

    Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.

  • CVE-2010-3581Oct 14, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.02

    Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows remote authenticated users to affect integrity via unknown vectors.

  • CVE-2010-3514Oct 14, 2010
    Oracle Corporation
    Sun Products Suite
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.

  • CVE-2010-3503Oct 14, 2010
    Oracle Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.

  • CVE-2010-2384Jul 13, 2010
    Oracle Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.

  • CVE-2010-2383Jul 13, 2010
    Oracle Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.

  • CVE-2010-2382Jul 13, 2010
    Oracle Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors.

  • CVE-2010-2370Jul 13, 2010
    Oracle Corporation
    Fusion Middleware
    risk 0.03cvss —epss 0.04

    Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.

  • CVE-2010-0916Jul 13, 2010
    Oracle Corporation
    Opensolaris
    risk 0.03cvss —epss 0.01

    Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rdist.

  • CVE-2010-1183Mar 29, 2010
    Sun Corporation
    Solaris
    risk 0.03cvss —epss 0.00

    Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager.

  • CVE-2009-1975Jul 14, 2009
    Oracle Corporation
    Bea Product Suite
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.

  • CVE-2009-0981Apr 15, 2009
    Oracle Corporation
    Application Express
    risk 0.03cvss —epss 0.05

    Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable…

  • CVE-2008-6065Feb 5, 2009
    Oracle Corporation
    Database Server
    risk 0.03cvss —epss 0.02

    Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing…

  • CVE-2008-5266Nov 28, 2008
    Sun Corporation
    Java System Application Server
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via…

  • CVE-2008-4609Oct 20, 2008
    Microsoft
    Windows
    risk 0.03cvss —epss 0.32

    The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate…

  • CVE-2008-2751Jun 18, 2008
    Sun Corporation
    Java System Application Server
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jn…

  • CVE-2007-4517Nov 8, 2007
    Oracle Corporation
    10g
    risk 0.03cvss —epss 0.05

    Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.

  • CVE-2007-5508Oct 17, 2007
    Oracle Corporation
    Text
    risk 0.03cvss —epss 0.05

    Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER,…

  • CVE-2007-3553Jul 3, 2007
    Oracle Corporation
    Application Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using (1) pls/ and (2) pls/MSBEP004/. NOTE: the…

  • CVE-2007-1506Mar 19, 2007
    Oracle Corporation
    Portal
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.

  • CVE-2007-1420Mar 12, 2007
    MySQL
    MySQL
    risk 0.03cvss —epss 0.01

    MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL…

  • CVE-2006-7141Mar 7, 2007
    Oracle Corporation
    Database Server
    risk 0.03cvss —epss 0.06

    Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such…

  • CVE-2007-0297Jan 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.

  • CVE-2006-6703Dec 23, 2006
    Oracle Corporation
    Portal
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.

  • CVE-2006-2505May 22, 2006
    Oracle Corporation
    Database Server
    risk 0.03cvss —epss 0.02

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package.

  • CVE-2006-0903Feb 27, 2006
    MySQL
    MySQL
    risk 0.03cvss —epss 0.01

    MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor…

  • CVE-2006-0586Feb 8, 2006
    Oracle Corporation
    10g Release 1
    risk 0.03cvss —epss 0.05

    Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT package; and (4) UPDATE_JOB, (5)…

  • CVE-2005-4550Dec 28, 2005
    Oracle Corporation
    Application Server Discussion Forum Portlet
    risk 0.03cvss —epss 0.06

    The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00).

  • CVE-2005-1496May 11, 2005
    Oracle Corporation
    10g
    risk 0.03cvss —epss 0.38

    The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

  • CVE-2005-0711May 2, 2005
    MySQL
    MySQL
    risk 0.03cvss —epss 0.02

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

  • CVE-2004-1774Aug 31, 2004
    Oracle Corporation
    10g
    risk 0.03cvss —epss 0.03

    Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

  • CVE-2004-1707Jul 30, 2004
    Oracle Corporation
    iAS
    risk 0.03cvss —epss 0.03

    The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified…

  • CVE-2004-2134Jan 28, 2004
    Oracle Corporation
    toplink mapping workBench
    risk 0.03cvss —epss 0.02

    Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.

  • CVE-2003-1480Dec 31, 2003
    MySQL
    MySQL
    risk 0.03cvss —epss 0.03

    MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.

  • CVE-2003-1071Jan 3, 2003
    Sun Corporation
    Solaris
    risk 0.03cvss —epss 0.01

    rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.

  • CVE-2002-1767Dec 31, 2002
    Actian
    Database Server
    risk 0.03cvss —epss 0.04

    Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.

  • CVE-2002-1089Oct 4, 2002
    Oracle Corporation
    Reports
    risk 0.03cvss —epss 0.05

    rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

  • CVE-2001-0833Dec 6, 2001
    Oracle Corporation
    Database Server
    risk 0.03cvss —epss 0.02

    Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."

  • CVE-2001-0941Nov 30, 2001
    Oracle Corporation
    Database Server
    risk 0.03cvss —epss 0.02

    Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.

  • CVE-2001-0407Jun 27, 2001
    MySQL
    MySQL
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

  • CVE-2001-1274Jan 23, 2001
    MySQL
    MySQL
    risk 0.03cvss —epss 0.05

    Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

  • CVE-2000-1180Jan 9, 2001
    Oracle Corporation
    Connection Manager Control
    risk 0.03cvss —epss 0.02

    Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.

  • CVE-2000-0987Dec 19, 2000
    Oracle Corporation
    oidldapd
    risk 0.03cvss —epss 0.01

    Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

Page 123 of 201