Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp a…May 3, 2001
- High7.5Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet…Mar 12, 2001
- Medium5.0Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.Mar 12, 2001
- High7.5Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.Feb 9, 2001
- High7.5Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.Feb 9, 2001
- High7.5Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.Jan 23, 2001
- High7.2MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and poss…Jan 19, 2001
- Medium4.6Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.Jan 9, 2001
- High7.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the…Dec 31, 2000
- Medium5.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privi…Dec 31, 2000
- Medium4.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.Dec 19, 2000
- Medium4.6Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privi…Dec 19, 2000
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Dec 19, 2000
- Critical10.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and…Dec 19, 2000
- Medium5.0Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.Jul 5, 2000
- High7.5Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.Mar 15, 2000
- Medium6.2The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.Mar 5, 2000
- High7.5MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.Feb 8, 2000
- Medium6.4MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.Jan 11, 2000
- High7.5Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.Nov 25, 1999
- Medium4.6dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.Aug 16, 1999
- Medium4.6The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.Apr 29, 1999
- Medium4.6Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is crea…Mar 4, 1999
- Medium4.6mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.Dec 27, 1998
- Critical10.0Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains acc…Sep 19, 1997