VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2000-0206Mar 5, 2000
    Oracle Corporation
    Oracle
    risk 0.03cvss —epss 0.01

    The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.

  • CVE-1999-0888Aug 16, 1999
    Oracle Corporation
    Intelligent Agent
    risk 0.03cvss —epss 0.01

    dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

  • CVE-1999-0711Apr 29, 1999
    Oracle Corporation
    Intelligent Agent
    risk 0.03cvss —epss 0.01

    The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.

  • CVE-2016-0490Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.27

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different…

  • CVE-2016-0486Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.28

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than…

  • CVE-2016-0485Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.28

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than…

  • CVE-2016-0484Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information…

  • CVE-2016-0482Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than…

  • CVE-2016-0481Jan 21, 2016
    Oracle Corporation
    Enterprise Manager Grid Control
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than…

  • CVE-2016-0480Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than…

  • CVE-2016-0478Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than…

  • CVE-2016-0477Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than…

  • CVE-2016-0476Jan 21, 2016
    Oracle Corporation
    Enterprise Manager Grid Control
    risk 0.02cvss —epss 0.22

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than…

  • CVE-2015-1283Jul 23, 2015
    Google
    Chrome
    risk 0.02cvss —epss 0.19

    Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via…

  • CVE-2014-7142Nov 26, 2014
    Squid Cache
    Squid
    risk 0.02cvss —epss 0.25

    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.

  • CVE-2014-6270Sep 12, 2014
    Squid Cache
    Squid
    risk 0.02cvss —epss 0.23

    Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based…

  • CVE-2014-2497Mar 21, 2014
    PHP
    PHP
    risk 0.02cvss —epss 0.22

    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

  • CVE-2014-0098Mar 18, 2014
    Apache
    HTTP Server
    risk 0.02cvss —epss 0.26

    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

  • CVE-2013-6438Mar 18, 2014
    Apache
    HTTP Server
    risk 0.02cvss —epss 0.27

    The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE…

  • CVE-2013-1862Jun 10, 2013
    Apache
    HTTP Server
    risk 0.02cvss —epss 0.25

    mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a…

  • CVE-2011-2264Jul 21, 2011
    Oracle Corporation
    Fusion Middleware
    risk 0.02cvss —epss 0.31

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the…

  • CVE-2010-1850Jun 8, 2010
    MySQL
    MySQL
    risk 0.02cvss —epss 0.22

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

  • CVE-2007-4467Aug 31, 2007
    Oracle Corporation
    Jinitiator
    risk 0.02cvss —epss 0.21

    Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters."…

  • CVE-2007-2108Apr 18, 2007
    Microsoft
    Windows
    risk 0.02cvss —epss 0.21

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka DB01. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue occurs because…

  • CVE-2005-2371Jul 26, 2005
    Oracle Corporation
    Reports
    risk 0.02cvss —epss 0.22

    Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in…

  • CVE-2002-0843Oct 11, 2002
    Apache
    Apache
    risk 0.02cvss —epss 0.21

    Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.

  • CVE-2002-0569Jul 3, 2002
    Oracle Corporation
    Application Server
    risk 0.02cvss —epss 0.19

    Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

  • CVE-2001-0660Oct 30, 2001
    Microsoft
    Exchange Server
    risk 0.02cvss —epss 0.22

    Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).

  • CVE-2019-19924MedDec 24, 2019
    SQLite
    SQLite
    risk 0.01cvss 5.3epss 0.08

    SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

  • CVE-2015-6015Jan 22, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013,…

  • CVE-2015-6014Jan 22, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013,…

  • CVE-2015-6013Jan 22, 2016
    Oracle Corporation
    Outside In Technology
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014,…

  • CVE-2016-0505Jan 21, 2016
    MariaDB
    MariaDB
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.

  • CVE-2016-0494Jan 21, 2016
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2016-0483Jan 21, 2016
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.15

    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU.…

  • CVE-2016-0451Jan 21, 2016
    Oracle Corporation
    Goldengate
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0452.

  • CVE-2015-3196Dec 6, 2015
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.13

    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double…

  • CVE-2015-8388Dec 2, 2015
    Pcre
    Pcre
    risk 0.01cvss —epss 0.07

    PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression,…

  • CVE-2015-8126Nov 13, 2015
    Libpng
    Libpng
    risk 0.01cvss —epss 0.10

    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application…

  • CVE-2015-4883Oct 21, 2015
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860.

  • CVE-2015-4881Oct 21, 2015
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835.

  • CVE-2015-4860Oct 21, 2015
    Oracle Corporation
    Java SE Embedded
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.

  • CVE-2015-4844Oct 21, 2015
    Oracle Corporation
    Java SE Embedded
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2015-4843Oct 21, 2015
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2015-4835Oct 21, 2015
    Oracle Corporation
    Java SE Embedded
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.

  • CVE-2015-4816Oct 21, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

  • CVE-2015-4805Oct 21, 2015
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.

  • CVE-2015-4796Oct 21, 2015
    Microsoft
    Windows
    risk 0.01cvss —epss 0.18

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than…

  • CVE-2015-4493Aug 16, 2015
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a…

  • CVE-2015-4491Aug 16, 2015
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.08

    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or…

Page 124 of 201