Vulnerability index

Browse CVEs

6,843 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Database Server MEDIUM 6.0
CVE-2007-2112

Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. …

Mitigation only
Fix from $1,600 2007-04-18
Database Server HIGH 7.2
CVE-2007-1442

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DAC…

No fix yet
Fix from $1,950 2007-03-14
Apex MEDIUM 6.0
CVE-2006-7138

SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote au…

Fix: after 2.1
Fix from $1,600 2007-03-07
Database Server MEDIUM 6.0
CVE-2006-7141EPSS 6%

Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" pri…

No fix yet
Fix from $1,600 2007-03-07
Database Server MEDIUM 6.0
CVE-2006-7067EPSS 7%

Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session …

No fix yet
Fix from $1,600 2007-03-02
Solaris HIGH 10.0
CVE-2007-0882EPSS 98%

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" seque…

No fix yet
Fix from $1,950 2007-02-12
Weblogic Portal MEDIUM 6.8
CVE-2007-0426

BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate enti…

Patch available
Fix from $1,600 2007-01-23
Database Server HIGH 8.5
CVE-2007-0272EPSS 7%

Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial …

Patch available
Fix from $1,950 2007-01-17
Enterpriseone HIGH 7.8
CVE-2007-0295

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in P…

Patch available
Fix from $1,950 2007-01-17
HTTP Server HIGH 7.5
CVE-2007-0279

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and at…

Patch available
Fix from $1,950 2007-01-17
HTTP Server HIGH 7.5
CVE-2007-0280

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.…

Patch available
Fix from $1,950 2007-01-17
Enterprise Manager HIGH 7.5
CVE-2007-0292

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM…

Patch available
Fix from $1,950 2007-01-17
Database Server MEDIUM 6.8
CVE-2007-0276

Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to (1) Advanced Security O…

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.8
CVE-2007-0277

Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or …

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.8
CVE-2007-0278

Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1)…

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.5
CVE-2007-0268

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) the Adva…

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.5
CVE-2007-0270EPSS 5%

Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or exe…

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.5
CVE-2007-0271

Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbm…

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 6.5
CVE-2007-0274

Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbm…

Patch available
Fix from $1,600 2007-01-17
Application Server MEDIUM 6.4
CVE-2007-0284

Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and at…

Patch available
Fix from $1,600 2007-01-17
Application Server MEDIUM 6.4
CVE-2007-0289

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2…

Patch available
Fix from $1,600 2007-01-17
Enterprise Manager MEDIUM 6.4
CVE-2007-0293

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle …

Patch available
Fix from $1,600 2007-01-17
Database Server MEDIUM 5.5
CVE-2007-0269

Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture…

Patch available
Fix from $1,600 2007-01-17
E Business Suite MEDIUM 5.5
CVE-2007-0290

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) App…

Patch available
Fix from $1,600 2007-01-17
HTTP Server MEDIUM 5.0
CVE-2007-0281

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0…

Patch available
Fix from $1,600 2007-01-17
Application Server MEDIUM 5.0
CVE-2007-0285

Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suit…

Patch available
Fix from $1,600 2007-01-17
Application Server MEDIUM 5.0
CVE-2007-0222EPSS 11%

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrar…

Patch available
Fix from $1,600 2007-01-17
Oracle10g MEDIUM 6.8
CVE-2006-6703

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc para…

Mitigation only
Fix from $1,600 2006-12-23
Application Server Portal MEDIUM 5.0
CVE-2006-6699

Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers an…

Mitigation only
Fix from $1,600 2006-12-23
Application Server Portal HIGH 7.5
CVE-2006-6697EPSS 11%

CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrar…

Mitigation only
Fix from $1,950 2006-12-22