Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the s…Check if you run itEPSS 2.84%Jan 9, 2001
- Medium4.6The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_pa…Check if you run itEPSS 5.29%Jan 9, 2001
- Medium4.6The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_para…Check if you run itEPSS 2.83%Jan 9, 2001
- Low2.1The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminf…Check if you run itEPSS 5.49%Jan 9, 2001
- Medium4.6The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_par…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_…Check if you run itEPSS 5.25%Jan 9, 2001
- High7.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the…Check if you run itEPSS 1.93%Dec 31, 2000
- Medium5.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privi…Check if you run itEPSS 4.83%Dec 31, 2000
- Medium4.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.Check if you run itEPSS 1.36%Dec 19, 2000
- Medium4.6Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privi…Check if you run itEPSS 2.31%Dec 19, 2000
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Check if you run itEPSS 1.93%Dec 19, 2000
- Critical10.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and…Check if you run itEPSS 4.74%Dec 19, 2000
- Medium5.0Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a c…Check this weekEPSS 14.79%Dec 11, 2000
- Medium4.6Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a…Check if you run itEPSS 1.38%Jul 11, 2000
- Medium4.6Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedur…Check if you run itEPSS 2.29%Jul 7, 2000
- Medium5.0Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.Check if you run itEPSS 3.28%Jul 5, 2000
- Medium5.0Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.Check this weekEPSS 14.63%Jun 5, 2000
- Critical10.0A system does not present an appropriate legal message or warning to a user who is accessing it.Check if you run itEPSS 6.02%Jun 1, 2000
- Low2.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.Check if you run itEPSS 2.39%May 30, 2000
- Low2.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any u…Check this weekEPSS 90.61%May 30, 2000
- High7.5Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.Check this weekEPSS 27.36%Mar 15, 2000
- High7.2When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the…Check if you run itEPSS 1.44%Mar 14, 2000
- High7.5Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.Check if you run itEPSS 9.45%Mar 8, 2000
Sort