VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,471 total · sorted by risk
  • CVE-2006-1881Apr 20, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln# APPS02.

  • CVE-2006-1866Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and other versions have unknown impact and attack vectors in the (1) Advanced Replication component, as identified by Vuln# DB01, and (2) Oracle Spatial component, as identified…

  • CVE-2006-1885Apr 20, 2006
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02.

  • CVE-2006-1877Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB13.

  • CVE-2006-1887Apr 20, 2006
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01.

  • CVE-2006-1875Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11. NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in…

  • CVE-2006-1876Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12. NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable…

  • CVE-2006-1873Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB08.

  • CVE-2006-1882Apr 20, 2006
    Oracle Corporation
    Iprocurement
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln# (1) APPS03 in (a) iProcurement; (2) APPS04 in (b) Oracle Application Object Library; (3) APPS06, (4) APPS07, and (5) APPS08 in…

  • CVE-2006-1874Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB09. NOTE: Oracle has not disputed reliable claims that this issue is SQL injection in MDSYS.PRVT_IDX using the…

  • CVE-2006-1884Apr 20, 2006
    Oneworld
    Oneworld Tools
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.

  • CVE-2006-1870Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln# DB05. NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented…

  • CVE-2006-1886Apr 20, 2006
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01.

  • CVE-2006-1879Apr 20, 2006
    Oracle Corporation
    Collaboration Suite
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04.

  • CVE-2006-1867Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Database Server 9.2.0.6 has unknown impact and attack vectors in the Advanced Replication component, aka Vuln# DB02.

  • CVE-2006-1871Apr 20, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package, aka Vuln# DB06.

  • CVE-2006-1880Apr 20, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS09 in the (b) Oracle Diagnostics Interfaces component; (3)…

  • CVE-2006-1705Apr 11, 2006
    Oracle Corporation
    Oracle9i
    risk 0.00cvss —epss 0.01

    Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.

  • CVE-2006-1358Mar 22, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

  • CVE-2006-1351Mar 22, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.

  • CVE-2006-1352Mar 22, 2006
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.02

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.

  • CVE-2006-1037Mar 7, 2006
    Oracle Corporation
    Diagnostics
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

  • CVE-2006-1035Mar 7, 2006
    Oracle Corporation
    Diagnostics
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.

  • CVE-2006-1036Mar 7, 2006
    Oracle Corporation
    Diagnostics
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."

  • CVE-2006-0584Feb 8, 2006
    Oracle Corporation
    Peopletools
    risk 0.00cvss —epss 0.00

    The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.

  • CVE-2006-0552Feb 4, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.

  • CVE-2006-0548Feb 4, 2006
    Oracle Corporation
    Database 10g
    risk 0.00cvss —epss 0.04

    SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE…

  • CVE-2006-0551Feb 4, 2006
    Oracle Corporation
    Database 10g
    risk 0.00cvss —epss 0.04

    SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being…

  • CVE-2006-0423Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.04

    BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.

  • CVE-2006-0428Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.

  • CVE-2006-0425Jan 25, 2006
    Bea
    WebLogic Portal
    risk 0.00cvss —epss 0.03

    BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.

  • CVE-2006-0369Jan 22, 2006
    MySQL
    MySQL
    risk 0.00cvss —epss 0.01

    MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the…

  • CVE-2006-0256Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB01.

  • CVE-2006-0285Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.

  • CVE-2006-0276Jan 18, 2006
    Oracle Corporation
    Collaboration Suite
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, 2) OCS02, 3) OCS03, 4) OCS04, 5) OCS05, 6) OCS06, 7) OCS07, (8) OCS08, and (9) OCS09 in…

  • CVE-2006-0269Jan 18, 2006
    Oracle Corporation
    Oracle10g
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a…

  • CVE-2006-0258Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB03.

  • CVE-2006-0259Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text…

  • CVE-2006-0279Jan 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS13 and (2) APPS14 in the Oracle iLearning component.

  • CVE-2006-0266Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB19.

  • CVE-2006-0284Jan 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) FORM01 and (2) FORM02 in the Oracle Forms component.

  • CVE-2006-0274Jan 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP03.

  • CVE-2006-0270Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the…

  • CVE-2006-0286Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS01.

  • CVE-2006-0262Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB08.

  • CVE-2006-0257Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02. NOTE: details are unavailable from Oracle, but they have not publicly disputed…

  • CVE-2006-0267Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20.

  • CVE-2006-0273Jan 18, 2006
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01.

  • CVE-2006-0277Jan 18, 2006
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS07 in the (b) Oracle Applications Framework component;…

  • CVE-2006-0265Jan 18, 2006
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network…

Page 266 of 270