VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2018-14048MedJul 13, 2018
    Libpng
    Libpng
    risk 0.43cvss 6.5epss 0.03

    An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.

  • CVE-2018-13785MedJul 9, 2018
    Libpng
    Libpng
    risk 0.43cvss 6.5epss 0.04

    In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

  • CVE-2018-11212MedMay 16, 2018
    IJG
    libjpeg
    risk 0.43cvss 6.5epss 0.05

    An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

  • CVE-2018-2845MedApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.43cvss 6.6epss 0.00

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2822MedApr 19, 2018
    Oracle Corporation
    Solaris Cluster
    risk 0.43cvss 6.6epss 0.00

    Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: Cluster Geo). The supported version that is affected is 4.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster…

  • CVE-2018-2755HigApr 19, 2018
    MariaDB
    MariaDB
    risk 0.43cvss 7.7epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…

  • CVE-2018-2717MedJan 18, 2018
    Oracle Corporation
    Solaris
    risk 0.43cvss 6.6epss 0.00

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SPARC Platform). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…

  • CVE-2018-2703MedJan 18, 2018
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2668MedJan 18, 2018
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2018-2665MedJan 18, 2018
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2018-2622MedJan 18, 2018
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2612MedJan 18, 2018
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2018-2582MedJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.43cvss 6.5epss 0.05

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-2573MedJan 18, 2018
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2017-10378MedOct 19, 2017
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2017-10276MedOct 19, 2017
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…

  • CVE-2015-7702MedAug 7, 2017
    NTP
    NTP
    risk 0.43cvss 6.5epss 0.05

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

  • CVE-2017-9287MedMay 29, 2017
    OpenLDAP
    Openldap
    risk 0.43cvss 6.5epss 0.07

    servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

  • CVE-2017-3600MedApr 24, 2017
    MariaDB
    MariaDB
    risk 0.43cvss 6.6epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network…

  • CVE-2017-3551MedApr 24, 2017
    Oracle Corporation
    Solaris
    risk 0.43cvss 6.6epss 0.00

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Smartcard Libraries). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…

  • CVE-2017-3331MedApr 24, 2017
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2017-3244MedJan 27, 2017
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2017-3238MedJan 27, 2017
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.05

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2016-5549MedJan 27, 2017
    Oracle Corporation
    Java SE Embedded
    risk 0.43cvss 6.5epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2016-4055MedJan 23, 2017
    Momentjs
    moment
    risk 0.43cvss 6.5epss 0.10

    The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

  • CVE-2015-8786MedDec 9, 2016
    Cloudfoundry
    Rabbitmq
    risk 0.43cvss 6.5epss 0.04

    The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

  • CVE-2016-5626MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.06

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

  • CVE-2016-5624MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.05

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5612MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5609MedOct 25, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.03

    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

  • CVE-2016-5581MedOct 25, 2016
    Oracle Corporation
    Irecruitment
    risk 0.43cvss 6.6epss 0.00

    Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2016-3492MedOct 25, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.07

    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-5844MedSep 21, 2016
    Libarchive
    Libarchive
    risk 0.43cvss 6.5epss 0.04

    Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.

  • CVE-2016-5470MedJul 21, 2016
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.43cvss 6.5epss 0.03

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer.

  • CVE-2016-3521MedJul 21, 2016
    MariaDB
    MariaDB
    risk 0.43cvss 6.5epss 0.10

    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

  • CVE-2016-3518MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-3501MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

  • CVE-2016-3486MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.43cvss 6.5epss 0.04

    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.

  • CVE-2014-3576HigAug 14, 2015
    Apache
    Activemq
    risk 0.43cvss 7.5epss 0.13

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

  • CVE-2012-0518MedKEVOct 16, 2012
    Oracle Corporation
    Fusion Middleware
    risk 0.43cvss 4.7epss 0.05

    Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

  • CVE-2026-83460MedSep 15, 2026
    Oracle Corporation
    Fusion Middleware
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of…

  • CVE-2026-83443MedSep 15, 2026
    Oracle Corporation
    Oracle Assets
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-83433MedSep 15, 2026
    Oracle Corporation
    Depot Repair
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-83347MedSep 15, 2026
    Oracle Corporation
    Database Server
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Net Services. Successful…

  • CVE-2026-83251MedSep 15, 2026
    Oracle Corporation
    Commerce Guided Search / Oracle Commerce Experience Manager
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2026-83250MedSep 15, 2026
    Oracle Corporation
    Commerce
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2026-83200MedSep 15, 2026
    Oracle Corporation
    Oracle Process Manufacturing Intelligence
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-83175MedSep 15, 2026
    Oracle Corporation
    Application Object Library
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2026-83140MedSep 15, 2026
    Oracle Corporation
    Field Service
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2026-83097MedSep 15, 2026
    Oracle Corporation
    Forms
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP…

Page 91 of 270