Oracle

Database Server

553 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2004-1339

  • EPSS 1.48%
  • Veröffentlicht 23.12.2004 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:07:30

SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.

9.8

CVE-2004-1363

  • EPSS 9.1%
  • Veröffentlicht 04.08.2004 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:07:33

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

9

CVE-2004-1371

  • EPSS 10.77%
  • Veröffentlicht 04.08.2004 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:07:34

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

2.1

CVE-2003-0727

  • EPSS 68.4%
  • Veröffentlicht 20.10.2003 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:02:43

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.

9

CVE-2003-0222

  • EPSS 11.04%
  • Veröffentlicht 12.05.2003 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:01:46

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

10

CVE-2003-0095

  • EPSS 13.11%
  • Veröffentlicht 03.03.2003 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:01:30

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own a...

9

CVE-2003-0096

  • EPSS 15.93%
  • Veröffentlicht 03.03.2003 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:01:30

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to th...

7.2

CVE-2002-1767

Exploit
  • EPSS 3.76%
  • Veröffentlicht 31.12.2002 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:59:56

Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.

6.8

CVE-2002-0840

  • EPSS 95.09%
  • Veröffentlicht 11.10.2002 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:58:14

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web pag...

7.5

CVE-2002-0843

  • EPSS 21.42%
  • Veröffentlicht 11.10.2002 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:58:14

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.