VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2016-5576MedOct 25, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.

  • CVE-2016-5517MedOct 25, 2016
    Oracle Corporation
    Applications Dba
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 allows local users to affect confidentiality via vectors related to AD Utilities.

  • CVE-2016-5505MedOct 25, 2016
    Oracle Corporation
    Database Server
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the RDBMS Programmable Interface component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.

  • CVE-2016-5486MedOct 25, 2016
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.

  • CVE-2016-0617MedSep 30, 2016
    Oracle Corporation
    Linux
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors.

  • CVE-2016-7166MedSep 21, 2016
    Libarchive
    Libarchive
    risk 0.36cvss 5.5epss 0.02

    libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

  • CVE-2016-6198MedAug 6, 2016
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.

  • CVE-2016-6197MedAug 6, 2016
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a…

  • CVE-2016-5265MedAug 5, 2016
    Mozilla Corporation
    Firefox
    risk 0.36cvss 5.5epss 0.01

    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut…

  • CVE-2016-5403MedAug 2, 2016
    QEMU
    Qemu
    risk 0.36cvss 5.5epss 0.01

    The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.

  • CVE-2016-5471MedJul 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5469.

  • CVE-2016-5469MedJul 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5471.

  • CVE-2016-5452MedJul 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot.

  • CVE-2016-3597MedJul 21, 2016
    Oracle Corporation
    VM Virtualbox
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.

  • CVE-2016-3497MedJul 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-5469 and CVE-2016-5471.

  • CVE-2016-3453MedJul 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel.

  • CVE-2016-4956MedJul 5, 2016
    NTP
    NTP
    risk 0.36cvss 5.3epss 0.16

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

  • CVE-2016-4470MedJun 27, 2016
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

  • CVE-2016-4581MedMay 23, 2016
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.

  • CVE-2016-3712MedMay 11, 2016
    QEMU
    Qemu
    risk 0.36cvss 5.5epss 0.01

    Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.

  • CVE-2016-3465MedApr 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.

  • CVE-2016-3462MedApr 21, 2016
    Oracle Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service.

  • CVE-2016-0666MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges.

  • CVE-2016-0665MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security: Encryption.

  • CVE-2016-0662MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition.

  • CVE-2016-0659MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.

  • CVE-2016-0658MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer.

  • CVE-2016-0657MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.

  • CVE-2016-0656MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654.

  • CVE-2016-0654MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656.

  • CVE-2016-0653MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS.

  • CVE-2016-0652MedApr 21, 2016
    Oracle Corporation
    MySQL
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML.

  • CVE-2016-0651MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.

  • CVE-2016-0650MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication.

  • CVE-2016-0649MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS.

  • CVE-2016-0646MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.36cvss 5.5epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.

  • CVE-2016-0469MedApr 21, 2016
    Oracle Corporation
    Retail MICROS C2
    risk 0.36cvss 5.5epss 0.00

    Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS.

  • CVE-2015-8631MedFeb 13, 2016
    Mit
    Kerberos 5
    risk 0.36cvss 6.5epss 0.05

    Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.

  • CVE-2014-3480MedJul 9, 2014
    PHP
    PHP
    risk 0.36cvss 6.5epss 0.11

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted…

  • CVE-2009-2857MedAug 19, 2009
    Sun Corporation
    Solaris
    risk 0.36cvss 5.5epss 0.00

    The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and…

  • CVE-2005-2293MedJul 18, 2005
    Oracle Corporation
    Formsbuilder
    risk 0.36cvss 5.5epss 0.02

    Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

  • CVE-2026-83488MedSep 15, 2026
    Oracle Corporation
    Fusion Middleware
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon.…

  • CVE-2026-83431MedSep 15, 2026
    Oracle Corporation
    Oracle Product Workbench
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-83346MedSep 15, 2026
    Oracle Corporation
    Fusion Middleware Control
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2026-83198MedSep 15, 2026
    Oracle Corporation
    Field Service
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2026-73919MedAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. …

  • CVE-2026-73913MedAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. …

  • CVE-2026-73911MedAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. …

  • CVE-2026-73881MedAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. …

  • CVE-2026-73874MedAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. …

Page 125 of 270