Vulnerability index

Browse CVEs

6,843 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Diagnostics HIGH 7.5
CVE-2006-1035

Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vec…

No fix yet
Fix from $1,950 2006-03-07
Diagnostics HIGH 7.5
CVE-2006-1036

Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions…

Patch available
Fix from $1,950 2006-03-07
Diagnostics HIGH 7.5
CVE-2006-1037

SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown at…

Mitigation only
Fix from $1,950 2006-03-07
Application Server HIGH 7.5
CVE-2006-0586EPSS 7%

Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multi…

Mitigation only
Fix from $1,950 2006-02-08
10g Enterprise Manager Grid Control HIGH 7.5
CVE-2006-0552

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact …

Patch available
Fix from $1,950 2006-02-04
Database Server HIGH 7.5
CVE-2006-0547EPSS 10%

Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit …

Mitigation only
Fix from $1,950 2006-02-04
Database Server HIGH 7.5
CVE-2006-0548

SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execu…

Mitigation only
Fix from $1,950 2006-02-04
Database Server HIGH 7.5
CVE-2006-0549EPSS 8%

SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers…

Mitigation only
Fix from $1,950 2006-02-04
Oracle Client HIGH 7.5
CVE-2006-0550EPSS 8%

Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: d…

Patch available
Fix from $1,950 2006-02-04
Database Server HIGH 7.5
CVE-2006-0551

SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitra…

Patch available
Fix from $1,950 2006-02-04
HTTP Server HIGH 7.5
CVE-2006-0435EPSS 7%

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0…

Patch available
Fix from $1,950 2006-01-26
Weblogic Portal HIGH 7.5
CVE-2006-0423

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attac…

Patch available
Fix from $1,950 2006-01-25
Weblogic Portal HIGH 7.5
CVE-2006-0428

Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to acce…

Patch available
Fix from $1,950 2006-01-25
Weblogic Portal MEDIUM 5.0
CVE-2006-0425

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.

Patch available
Fix from $1,600 2006-01-25
Database Server HIGH 10.0
CVE-2006-0256EPSS 5%

Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and …

No fix yet
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0257

Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and a…

Patch available
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0258EPSS 6%

Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors…

No fix yet
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0259

Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1)…

Patch available
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0260

Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Orac…

Patch available
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0261EPSS 6%

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as…

Mitigation only
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0262

Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has u…

Mitigation only
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0263EPSS 7%

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impac…

Mitigation only
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0265EPSS 5%

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack v…

Patch available
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0270

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and att…

Mitigation only
Fix from $1,950 2006-01-18
Database Server HIGH 10.0
CVE-2006-0271

Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impa…

Mitigation only
Fix from $1,950 2006-01-18
Application Server HIGH 10.0
CVE-2006-0273EPSS 5%

Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as ide…

No fix yet
Fix from $1,950 2006-01-18
Application Server HIGH 10.0
CVE-2006-0274EPSS 6%

Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and at…

No fix yet
Fix from $1,950 2006-01-18
Collaboration Suite HIGH 10.0
CVE-2006-0276

Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, …

Patch available
Fix from $1,950 2006-01-18
E Business Suite HIGH 10.0
CVE-2006-0277

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by…

No fix yet
Fix from $1,950 2006-01-18
E Business Suite HIGH 10.0
CVE-2006-0278

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by …

No fix yet
Fix from $1,950 2006-01-18