← Back

Oracle

oracle

12,942 CVEs • 1,116 products

Products (1,116)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Coherence
coherence
Helidon
helidon
Http Server
http_server
Jrockit
jrockit
Openjdk
openjdk
Marketing
marketing
Database
database
Javafx
javafx
Essbase
essbase
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,942)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oracle
1Fusion Middleware
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin.
1Oracle
1Solaris
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
7.8 HIGH· v2
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB Utilities.
2Canonical
Oracle
3Jdk
JreUbuntu Linux
Oct 15, 2026
Jan 21, 2016
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networ...Show more
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.Show less
1Oracle
1Fusion Middleware
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulne...Show more
Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429.Show less
1Oracle
1E Business Suite
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
2.6 LOW· v2
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX.
1Oracle
1Database Server
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Supply Chain Products Suite
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security.
1Oracle
1Database Server
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.
1Oracle
1Solaris
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Boot.
1Oracle
1Database Server
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
1Oracle
1Solaris
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service.
1Oracle
1Jd Edwards Products
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Mo...Show more
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Monitoring and Diagnostics SEC.Show less
1Oracle
1Enterprise Manager Grid Control
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen.
1Oracle
1Fusion Middleware
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
1.9 LOW· v2
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In Filters, a different...Show more
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In Filters, a different vulnerability than CVE-2015-6013, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432.Show less
4Fedoraproject
OpenstackOracle+1 more
4Fedora
OpenstackOrchestration Api+1 more
May 6, 2026
Jan 20, 2016
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine...Show more
The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.Show less
5Apple
HpOpenbsd+2 more
6Linux
Mac Os XOpenssh+3 more
May 29, 2026
Jan 14, 2016
N/A· v4
8.1 HIGH· v3
4.6 MEDIUM· v2
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection fi...Show more
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.Show less
5Apple
HpOpenbsd+2 more
6Linux
Mac Os XOpenssh+3 more
May 29, 2026
Jan 14, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buff...Show more
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.Show less
6Canonical
DebianFedoraproject+3 more
11Debian Linux
Enterprise Linux EusEnterprise Linux Server+8 more
May 6, 2026
Jan 12, 2016
N/A· v4
8.6 HIGH· v3
7.8 HIGH· v2
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
4Debian
OracleQemu+1 more
9Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+6 more
May 6, 2026
Jan 8, 2016
N/A· v4
9.0 CRITICAL· v3
6.8 MEDIUM· v2
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large pack...Show more
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.Show less
3Libtiff
OracleRedhat
6Enterprise Linux
Enterprise Linux DesktopEnterprise Linux Workstation+3 more
May 6, 2026
Jan 8, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width fie...Show more
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.Show less