← Back

Oracle

oracle

12,942 CVEs • 1,116 products

Products (1,116)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Coherence
coherence
Helidon
helidon
Http Server
http_server
Jrockit
jrockit
Openjdk
openjdk
Marketing
marketing
Database
database
Javafx
javafx
Essbase
essbase
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,942)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
6Canonical
DebianMit+3 more
9Debian Linux
Kerberos 5Leap+6 more
May 6, 2026
Nov 9, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) vi...Show more
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.Show less
2Mozilla
Oracle
7Firefox
Glassfish ServerIplanet Web Proxy Server+4 more
May 6, 2026
Nov 5, 2015
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, all...Show more
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.Show less
1Oracle
1Supply Chain Products Suite
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerabi...Show more
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4892.Show less
1Oracle
3Javafx
JdkJre
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
1Oracle
1Oracle And Sun Systems Product Suite
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via un...Show more
Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management.Show less
1Oracle
1Fusion Middleware
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vecto...Show more
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.Show less
1Oracle
1Fusion Middleware
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine.
1Oracle
3Jdk
JreJrockit
Oct 14, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE...Show more
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.Show less
2Oracle
Redhat
2Enterprise Linux
Mysql
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.
1Oracle
1Fusion Middleware
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces.
1Oracle
3Javafx
JdkJre
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916.
1Oracle
1Solaris
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-...Show more
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4820.Show less
1Oracle
3Javafx
JdkJre
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
1Oracle
1Mysql
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML.
1Oracle
1Mysql
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to libmysqld.
1Oracle
2Jdk
Jre
Oct 14, 2026
Oct 22, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
4Opensuse
OracleRedhat+1 more
21Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Eus Compute Node+18 more
Apr 22, 2026
Oct 22, 2015
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
1Oracle
2Jdk
Jre
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
1Oracle
1Database Server
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknow...Show more
Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.Show less