VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,471 total · sorted by risk
  • CVE-2006-5354Oct 18, 2006
    Oracle Corporation
    HTTP Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack…

  • CVE-2006-5356Oct 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02.

  • CVE-2006-5378Oct 18, 2006
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.

  • CVE-2006-5348Oct 18, 2006
    Oracle Corporation
    HTTP Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05.

  • CVE-2006-5337Oct 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 has unknown impact and remote authenticated attack vectors, aka Vuln# DB09.

  • CVE-2006-5350Oct 18, 2006
    Oracle Corporation
    HTTP Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.

  • CVE-2006-5363Oct 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln# SSO02.

  • CVE-2006-5370Oct 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore.

  • CVE-2006-5359Oct 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of…

  • CVE-2006-5343Oct 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vectors related to sys.dbms_scheduler, aka Vuln# DB19.

  • CVE-2006-5376Oct 18, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and…

  • CVE-2006-5371Oct 18, 2006
    Oracle Corporation
    Email Center
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07.

  • CVE-2006-5075Sep 29, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.03

    The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors related to an SSL client.

  • CVE-2006-5013Sep 27, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.03

    Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel panic) via crafted IPv6 packets.

  • CVE-2006-4226Aug 18, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

  • CVE-2006-4031Aug 9, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

  • CVE-2006-3709Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS04.

  • CVE-2006-3700Jul 21, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and Versioning (DAV) and (2) DB23 for XMLDB.

  • CVE-2006-3712Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.4.2 and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS07.

  • CVE-2006-3713Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in OC4J for Oracle Application Server 10.1.3.0 has unknown impact and attack vectors, aka Oracle Vuln# AS09.

  • CVE-2006-3707Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 and 9.0.3.1 has unknown impact and attack vectors, aka Oracle Vuln# AS02.

  • CVE-2006-3718Jul 21, 2006
    Oracle Corporation
    Exchange
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS16 and (2) APPS17.

  • CVE-2006-3702Jul 21, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 for OCI;…

  • CVE-2006-3724Jul 21, 2006
    Oracle Corporation
    JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.

  • CVE-2006-3699Jul 21, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB02.

  • CVE-2006-3714Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10.

  • CVE-2006-3703Jul 21, 2006
    Oracle Corporation
    InterMedia
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.

  • CVE-2006-3723Jul 21, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE02.

  • CVE-2006-3701Jul 21, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB05.

  • CVE-2006-3721Jul 21, 2006
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04.

  • CVE-2006-3711Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 9.0.4.1 has unknown impact and attack vectors, aka Oracle Vuln# AS06.

  • CVE-2006-3720Jul 21, 2006
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.

  • CVE-2006-3716Jul 21, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS01 for Internet Expenses; (2) APPS02, (3) APPS05, (4) APPS06, (5) APPS07, (6) APPS08, (7) APPS09, and (8) APPS10 for…

  • CVE-2006-3704Jul 21, 2006
    Oracle Corporation
    ODBC Driver
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.

  • CVE-2006-3719Jul 21, 2006
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.

  • CVE-2006-3706Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01.

  • CVE-2006-3717Jul 21, 2006
    Oracle Corporation
    Applications
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS03 and (2) APPS04 for Oracle Application Object Library; and (3) APPS20 for Oracle XML Gateway.

  • CVE-2006-3710Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2) AS08.

  • CVE-2006-3705Jul 21, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is…

  • CVE-2006-3715Jul 21, 2006
    Oracle Corporation
    Collaboration Suite
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01.

  • CVE-2006-3728Jul 21, 2006
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can…

  • CVE-2006-3722Jul 21, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE01.

  • CVE-2006-3708Jul 21, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.

  • CVE-2006-3486Jul 10, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.01

    Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors,…

  • CVE-2006-2753Jun 1, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the…

  • CVE-2006-2468May 19, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.

  • CVE-2006-2466May 19, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."

  • CVE-2006-1517May 5, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.05

    sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.

  • CVE-2006-1881Apr 20, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln# APPS02.

  • CVE-2006-1876Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12. NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable…

Page 265 of 270