VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,082 total · sorted by risk
  • CVE-2007-3880Nov 14, 2007
    Sun Corporation
    Net Connect Software
    risk 0.00cvss —epss 0.00

    Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.

  • CVE-2007-5897Nov 8, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be…

  • CVE-2007-5766Nov 8, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

  • CVE-2007-5576Oct 18, 2007
    Bea
    Tuxedo
    risk 0.00cvss —epss 0.01

    BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.

  • CVE-2007-5554Oct 18, 2007
    Oracle Corporation
    Oracle
    risk 0.00cvss —epss 0.02

    Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is…

  • CVE-2007-5533Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE02.

  • CVE-2007-5534Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has unknown impact and remote attack vectors, aka PSE_HCM01.

  • CVE-2007-5532Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.

  • CVE-2007-5524Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9.

  • CVE-2007-5517Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2 and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS02.

  • CVE-2007-5509Oct 17, 2007
    Oracle Corporation
    Spatial Component
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.

  • CVE-2007-5528Oct 17, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector Human Resources (APP03) and (2) Quoting component (APP06).

  • CVE-2007-5506Oct 17, 2007
    Oracle Corporation
    Core Rdbms
    risk 0.00cvss —epss 0.03

    The Core RDBMS component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (CPU consumption) via a crafted type 6 Data packet, aka DB20.

  • CVE-2007-5518Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.

  • CVE-2007-5525Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10.

  • CVE-2007-5527Oct 17, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component (APP01), (2) Contracts Integration (APP02), (3) Applications Manager (APP04), (4) Marketing component…

  • CVE-2007-5529Oct 17, 2007
    Oracle Corporation
    Oracle Self-Service Web Applications
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08.

  • CVE-2007-5513Oct 17, 2007
    Oracle Corporation
    XML DB
    risk 0.00cvss —epss 0.03

    The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries,…

  • CVE-2007-5520Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unknown impact and remote attack vectors, aka AS05.

  • CVE-2007-5505Oct 17, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the Export component (DB02), (2) Oracle Text (DB04), (3) Oracle Text (DB05), (4) Spatial component (DB07),…

  • CVE-2007-5519Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04.

  • CVE-2007-5507Oct 17, 2007
    Oracle Corporation
    TNS Listener
    risk 0.00cvss —epss 0.03

    The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (crash) or read potentially sensitive memory via a connect GIOP packet with an…

  • CVE-2007-5522Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, aka AS07.

  • CVE-2007-5531Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.

  • CVE-2007-5514Oct 17, 2007
    Oracle Corporation
    Database Vault
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to (1) Database Vault component (DB24) and (2) SQL Execution component (DB26).

  • CVE-2007-5510Oct 17, 2007
    Oracle Corporation
    Workspace Manager
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the Workspace Manager component in Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 have unknown impact and remote attack vectors, aka (1) DB08, (2) DB09, (3) DB10, (4) DB11, (5) DB12, (6) DB13, (7) DB14, (8) DB15,…

  • CVE-2007-5523Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS08.

  • CVE-2007-5530Oct 17, 2007
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown impact and remote attack vectors, aka EM01.

  • CVE-2007-5516Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Process Mgmt & Notification component in Oracle Application Server 10.1.3.3 has unknown impact and remote attack vectors, aka AS01.

  • CVE-2007-5512Oct 17, 2007
    Oracle Corporation
    Database Vault
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21.

  • CVE-2007-5526Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11.

  • CVE-2007-5504Oct 17, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a…

  • CVE-2007-5521Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS06.

  • CVE-2007-5515Oct 17, 2007
    Oracle Corporation
    Spatial
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.2, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB27.

  • CVE-2007-3866Jul 18, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS03), (c) Oracle Application Object Library (APPS09), and (1) APPS12, (2) APPS13,…

  • CVE-2007-3869Jul 18, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7 allow remote authenticated users to have an unknown impact, aka (1) PSE04 and (2) PSE05.

  • CVE-2007-3860Jul 18, 2007
    Oracle Corporation
    Apex
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the…

  • CVE-2007-3864Jul 18, 2007
    Oracle Corporation
    Collaboration Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via (1) Instant Messaging/Presence (OCS01) and (2) Oracle Single Sign On (AS02).

  • CVE-2007-3865Jul 18, 2007
    Oracle Corporation
    Customer Intelligence
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01.

  • CVE-2007-3856Jul 18, 2007
    Oracle Corporation
    Data Mining
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7, 9.2.0.8, and 9.2.0.8DV has unknown impact and remote authenticated attack vectors related to…

  • CVE-2007-3857Jul 18, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1) unspecified vectors (DB05), (2) CTXSYS.DRVXMD (DB06), (3) CTXSYS.DRI_MOVE_CTXSYS (DB07), (4) CTXSYS.DRVXMD…

  • CVE-2007-3863Jul 18, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle JDeveloper for Application Server 10.1.2.2 and 10.1.3.1, and Collaboration Suite 10.1.2, allows context-dependent attackers to have an unknown impact via custom applications that use JBO.SERVER, aka JDEV02.

  • CVE-2007-3861Jul 18, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have an unknown impact via custom applications that use JBO.KEY, aka JDEV01.

  • CVE-2007-3868Jul 18, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.

  • CVE-2007-3858Jul 18, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 allow remote authenticated users to have an unknown impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11) and (2) Program Interface (DB13).

  • CVE-2007-3854Jul 18, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has…

  • CVE-2007-3862Jul 18, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01.

  • CVE-2007-3867Jul 18, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2) APPS05, and (3) APPS06 in (a) Oracle Application Object Library, (4) APPS07 in Oracle Customer Intelligence, (5) APPS08 in Oracle…

  • CVE-2007-3859Jul 18, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka OID01.

  • CVE-2007-3853Jul 18, 2007
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM component (DB01), (2) Oracle Text component (DB09), and (3) MDSYS.SDO_GEOR_INT in the Spatial component…

Page 194 of 202