Browse CVEs

HIGH 7.5 CVE-2006-1035 Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vec… Diagnostics No fix yet Fix from $1,9502006-03-07 HIGH 7.5 CVE-2006-1036 Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions… Diagnostics Patch available Fix from $1,9502006-03-07 HIGH 7.5 CVE-2006-1037 SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown at… Diagnostics Mitigation only Fix from $1,9502006-03-07 HIGH 7.5 CVE-2006-0586EPSS 7% Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multi… Application Server Mitigation only Fix from $1,9502006-02-08 HIGH 7.5 CVE-2006-0552 Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact … 10g Enterprise Manager Grid Control Patch available Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0547EPSS 10% Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit … Database Server Mitigation only Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0548 SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execu… Database Server Mitigation only Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0549EPSS 8% SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers… Database Server Mitigation only Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0550EPSS 8% Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: d… Oracle Client Patch available Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0551 SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitra… Database Server Patch available Fix from $1,9502006-02-04 HIGH 7.5 CVE-2006-0435EPSS 7% Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0… HTTP Server Patch available Fix from $1,9502006-01-26 HIGH 7.5 CVE-2006-0423 BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attac… Weblogic Portal Patch available Fix from $1,9502006-01-25 HIGH 7.5 CVE-2006-0428 Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to acce… Weblogic Portal Patch available Fix from $1,9502006-01-25 MEDIUM 5.0 CVE-2006-0425 BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors. Weblogic Portal Patch available Fix from $1,6002006-01-25 HIGH 10.0 CVE-2006-0256EPSS 5% Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and … Database Server No fix yet Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0257 Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and a… Database Server Patch available Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0258EPSS 6% Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors… Database Server No fix yet Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0259 Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1)… Database Server Patch available Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0260 Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Orac… Database Server Patch available Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0261EPSS 6% Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as… Database Server Mitigation only Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0262 Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has u… Database Server Mitigation only Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0263EPSS 7% Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impac… Database Server Mitigation only Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0265EPSS 5% Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack v… Database Server Patch available Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0270 Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and att… Database Server Mitigation only Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0271 Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impa… Database Server Mitigation only Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0273EPSS 5% Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as ide… Application Server No fix yet Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0274EPSS 6% Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and at… Application Server No fix yet Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0276 Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, … Collaboration Suite Patch available Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0277 Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by… E Business Suite No fix yet Fix from $1,9502006-01-18 HIGH 10.0 CVE-2006-0278 Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by … E Business Suite No fix yet Fix from $1,9502006-01-18