VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,049 total · sorted by risk
  • CVE-2016-4055MedJan 23, 2017
    Momentjs
    moment
    risk 0.43cvss 6.5epss 0.10

    The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

  • CVE-2015-8786MedDec 9, 2016
    Cloudfoundry
    Rabbitmq
    risk 0.43cvss 6.5epss 0.04

    The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

  • CVE-2016-5626MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.06

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

  • CVE-2016-5624MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.05

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5612MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.03

    Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5609MedOct 25, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.03

    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5581MedOct 25, 2016
    Oracle Corporation
    Irecruitment
    risk 0.43cvss 6.6epss 0.00

    Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2016-3492MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.07

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-5470MedJul 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.43cvss 6.5epss 0.03

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer.

  • CVE-2016-3521MedJul 21, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.06

    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

  • CVE-2016-3518MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-3501MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-3486MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.

  • CVE-2014-3576HigAug 14, 2015
    Apache
    Activemq
    risk 0.43cvss 7.5epss 0.13

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

  • CVE-2012-0518MedKEVOct 16, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.43cvss 4.7epss 0.05

    Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

  • CVE-2026-35252MedApr 21, 2026
    Oracle Corporation
    Fusion Middleware
    risk 0.42cvss 6.4epss 0.00

    Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected are 12.2.1.4.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS…

  • CVE-2026-34324MedApr 21, 2026
    Oracle Corporation
    Life Sciences Inform
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-34315MedApr 21, 2026
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2026-34313MedApr 21, 2026
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows low…

  • CVE-2026-34308MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2026-34306MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Fin Project Costing
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2026-34303MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2026-34301MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Fin Maintenance Management
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2026-34300MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Fin Contracts
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft…

  • CVE-2026-34299MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Fin Maintenance Management
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2026-34295MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Scm Purchasing
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft…

  • CVE-2026-34281MedApr 21, 2026
    Oracle Corporation
    Solaris
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…

  • CVE-2026-34280MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Human Capital Management Human Resources
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-34276MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-34272MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.…

  • CVE-2026-34271MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-34270MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-34266MedApr 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Human Capital Management Absence Management
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-22017MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2026-22009MedApr 21, 2026
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2024-21262MedOct 15, 2024
    Oracle Corporation
    Mysql Connectors
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2024-20985MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2024-20977MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2024-20975MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2024-20973MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2024-20963MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2024-20961MedJan 16, 2024
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2023-51071MedJan 13, 2024
    QStar Archive Solutions
    QStar Archive Solutions
    risk 0.42cvss 6.5epss 0.01

    An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link.

  • CVE-2023-22118MedOct 17, 2023
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2023-22106MedOct 17, 2023
    Oracle Corporation
    Enterprise Command Center Framework
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: API). Supported versions that are affected are ECC: 8, 9 and 10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2023-22095MedOct 17, 2023
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). The supported version that is affected is 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. …

  • CVE-2023-22093MedOct 17, 2023
    Oracle Corporation
    Irecruitment
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2023-22090MedOct 17, 2023
    Oracle Corporation
    PeopleSoft Enterprise CC Common Application Objects
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Events & Notifications). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2023-22079MedOct 17, 2023
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2023-22059MedOct 17, 2023
    Oracle Corporation
    Mysql Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

Page 44 of 201