VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2009-1978Jul 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.65

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle…

  • CVE-2008-5457Jan 14, 2009
    Bea
    BEA Product Suite
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via…

  • CVE-2008-5444Jan 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.

  • CVE-2008-4008Oct 14, 2008
    Bea
    WebLogic Server Plugins for Apache
    risk 0.08cvss —epss 0.56

    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the…

  • CVE-2004-2115Dec 31, 2004
    Oracle Corporation
    HTTP Server
    risk 0.08cvss —epss 0.58

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

  • CVE-2003-0727Oct 20, 2003
    Oracle Corporation
    Database Server
    risk 0.08cvss —epss 0.68

    Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.

  • CVE-2014-2424Apr 16, 2014
    Oracle Corporation
    Fusion Middleware
    risk 0.07cvss —epss 0.48

    Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

  • CVE-2013-5877Jan 15, 2014
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.07cvss —epss 0.55

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

  • CVE-2012-5081Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.07cvss —epss 0.45

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.

  • CVE-2010-3585Oct 14, 2010
    Oracle Corporation
    VM
    risk 0.07cvss —epss 0.52

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle…

  • CVE-2010-0904Jul 13, 2010
    Oracle Corporation
    Secure Backup
    risk 0.07cvss —epss 0.51

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.

  • CVE-2010-1423Apr 15, 2010
    Oracle Corporation
    Jre
    risk 0.07cvss —epss 0.56

    Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2)…

  • CVE-2003-0150Mar 24, 2003
    MySQL
    MySQL
    risk 0.07cvss —epss 0.45

    MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

  • CVE-1999-0046Feb 6, 1997
    Bsdi
    BSD OS
    risk 0.07cvss —epss 0.52

    Buffer overflow of rlogin program using TERM environmental variable.

  • CVE-2013-3827Oct 16, 2013
    Oracle Corporation
    Fusion Middleware
    risk 0.06cvss —epss 0.32

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion…

  • CVE-2012-5613Dec 3, 2012
    MariaDB
    MariaDB
    risk 0.06cvss —epss 0.32

    MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege…

  • CVE-2012-3137Sep 21, 2012
    Oracle Corporation
    Database Server
    risk 0.06cvss —epss 0.31

    The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to…

  • CVE-2010-2632Jan 19, 2011
    Sun Corporation
    Sunos
    risk 0.06cvss —epss 0.35

    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this…

  • CVE-2009-1968Jul 14, 2009
    Oracle Corporation
    Secure Enterprise Search
    risk 0.06cvss —epss 0.40

    Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an…

  • CVE-2008-5448Jan 14, 2009
    Oracle Corporation
    Secure Backup
    risk 0.06cvss —epss 0.41

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.

  • CVE-2008-3979Jan 14, 2009
    Oracle Corporation
    Spatial
    risk 0.06cvss —epss 0.32

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has…

  • CVE-2008-3984Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.42

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…

  • CVE-2008-3983Oct 14, 2008
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.42

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than…

  • CVE-2007-5511Oct 17, 2007
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.32

    SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but…

  • CVE-2006-1516May 5, 2006
    MySQL
    MySQL
    risk 0.06cvss —epss 0.36

    The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

  • CVE-2006-1518May 5, 2006
    MySQL
    MySQL
    risk 0.06cvss —epss 0.38

    Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

  • CVE-2005-4832Dec 31, 2005
    Oracle Corporation
    Database Server
    risk 0.06cvss —epss 0.43

    SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different…

  • CVE-2002-0659Aug 12, 2002
    OpenSSL Project
    OpenSSL
    risk 0.06cvss —epss 0.36

    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

  • CVE-2002-0568Jul 3, 2002
    Oracle Corporation
    Application Server
    risk 0.06cvss —epss 0.75

    Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.

  • CVE-2016-0488Jan 21, 2016
    Oracle Corporation
    Application Testing Suite
    risk 0.05cvss —epss 0.65

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different…

  • CVE-2015-4870Oct 21, 2015
    Fedoraproject
    Fedora
    risk 0.05cvss —epss 0.30

    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.

  • CVE-2014-8768Nov 20, 2014
    Tcpdump
    Tcpdump
    risk 0.05cvss —epss 0.20

    Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.

  • CVE-2013-2472Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown…

  • CVE-2013-2470Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown…

  • CVE-2013-1571Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.67

    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc.…

  • CVE-2013-2419Apr 17, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. …

  • CVE-2012-5612Dec 3, 2012
    MariaDB
    MariaDB
    risk 0.05cvss —epss 0.21

    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated…

  • CVE-2012-5611Dec 3, 2012
    MariaDB
    MariaDB
    risk 0.05cvss —epss 0.24

    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote…

  • CVE-2011-0419May 16, 2011
    Apache
    HTTP Server
    risk 0.05cvss —epss 0.30

    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…

  • CVE-2006-3469Jul 21, 2006
    MySQL
    MySQL
    risk 0.05cvss —epss 0.29

    Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later…

  • CVE-2006-3081Jun 19, 2006
    MySQL
    MySQL
    risk 0.05cvss —epss 0.26

    mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

  • CVE-2006-2081Apr 27, 2006
    Oracle Corporation
    Database Server
    risk 0.05cvss —epss 0.22

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the DBMS_EXPORT_EXTENSION package. NOTE: this issue was originally linked to DB05 (CVE-2006-1870), but a reliable third party has claimed that…

  • CVE-2006-0287Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.05cvss —epss 0.29

    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.

  • CVE-2005-3204Oct 14, 2005
    Oracle Corporation
    XML DB
    risk 0.05cvss —epss 0.21

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

  • CVE-2005-3206Oct 14, 2005
    Oracle Corporation
    Database Server
    risk 0.05cvss —epss 0.22

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.

  • CVE-2005-3207Oct 14, 2005
    Oracle Corporation
    Forms
    risk 0.05cvss —epss 0.20

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.

  • CVE-2005-1381May 3, 2005
    Oracle Corporation
    Webcache
    risk 0.05cvss —epss 0.20

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.

  • CVE-2005-1383May 3, 2005
    Oracle Corporation
    Application Server
    risk 0.05cvss —epss 0.31

    The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

  • CVE-2004-0835Nov 3, 2004
    MySQL
    MySQL
    risk 0.05cvss —epss 0.22

    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

  • CVE-2002-1375Dec 23, 2002
    MySQL
    MySQL
    risk 0.05cvss —epss 0.24

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.

Page 181 of 270