OR
Product
Oracle8i
46
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Oracle8i to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-0552 | – | Feb 4 | Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as… Affected: enterprise_8.1.7.4; standard_8.0.6; standard_8.0.6.3; standard_8.1.7.4 |
| CVE-2006-0262 | – | Jan 18 | Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack… Affected: enterprise_8.1.7.4; standard_8.1.7.4 |
| CVE-2006-0271 | – | Jan 18 | Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as… Affected: enterprise_8.1.7.4; standard_8.1.7.4 |
| CVE-2005-3641 | – | Nov 16 | Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username Affected: enterprise_8.0.5.0.0; enterprise_8.0.6.0.0; enterprise_8.0.6.0.1; enterprise_8.1.5.0.0; enterprise_8.1.5.0.2; enterprise_8.1.5.1.0; +13 more |
| CVE-2004-0638 | – | Dec 31 | Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and… Affected: enterprise_8.1.7.4; standard_8.1.7.4 |
| CVE-2004-0637 | – | Sep 2 | Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible Affected: enterprise_8.1.7_.4; standard_8.1.7_.4 |
| CVE-2004-1366 | – | Aug 4 | Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1365 | – | Aug 4 | Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1364 | – | Aug 4 | Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1362 | – | Aug 4 | The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1371 | – | Aug 4 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1370 | – | Aug 4 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1369 | – | Aug 4 | The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1368 | – | Aug 4 | ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1367 | – | Aug 4 | Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +13 more |
| CVE-2004-1707 | – | Jul 30 | The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at… Affected: enterprise_8.0.5_.0.0; enterprise_8.0.6_.0.0; enterprise_8.0.6_.0.1; enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; +12 more |
| CVE-2003-0634 | – | Aug 27 | Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database… Affected: enterprise_8.1.5_.0.0; enterprise_8.1.5_.0.2; enterprise_8.1.5_.1.0; enterprise_8.1.6_.0.0; enterprise_8.1.6_.1.0; enterprise_8.1.7_.0.0; +7 more |
| CVE-2003-0222 | – | May 12 | Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK"… Affected: 8.0.6; 8.0.6.3; 8.0x; 8.1.5; 8.1.6; 8.1.7; +3 more |
| CVE-2003-0095 | – | Mar 3 | Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during… Affected: 8.1.7; 8.1.7.1 |
| CVE-2003-0096 | – | Mar 3 | Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string… Affected: 8.1.7; 8.1.7.1 |
| CVE-2002-1118 | – | Oct 28 | TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD… Affected: 8.1.5; 8.1.5.0.0_enterprise; 8.1.5.0.2_enterprise; 8.1.5.1.0_enterprise; 8.1.6; 8.1.6.0.0_enterprise; +5 more |
| CVE-2002-0840 | – | Oct 11 | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS… Affected: 8.1.7; 8.1.7.1; 8.1.7_.0.0_enterprise; 8.1.7_.1.0_enterprise |
| CVE-2002-0843 | – | Oct 11 | Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of… Affected: 8.1.7; 8.1.7.0.0_enterprise; 8.1.7.1; 8.1.7.1.0_enterprise |
| CVE-2002-0857 | – | Sep 5 | Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle… Affected: 8.1 |
| CVE-2002-0858 | – | Sep 5 | catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain… Affected: All versions, or not specified |
| CVE-2002-0567 | – | Jul 3 | Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener… Affected: 8.1.5; 8.1.6; 8.1.7; 8.1.7.1; enterprise_8.0.5.0.0; enterprise_8.0.6.0.0; +8 more |
| CVE-2002-0566 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an… Affected: 8.1.7; 8.1.7_.1 |
| CVE-2002-0564 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to… Affected: 8.1.7; 8.1.7.1 |
| CVE-2002-0563 | – | Jul 3 | The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring… Affected: 8.1.7; 8.1.7_.1 |
| CVE-2002-0561 | – | Jul 3 | The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to… Affected: 8.1.7; 8.1.7_.1 |
| CVE-2002-0559 | – | Jul 3 | Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long… Affected: 8.1.7; 8.1.7.1 |
| CVE-2002-0560 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature,… Affected: 8.1.7; 8.1.7.1 |
| CVE-2002-0568 | – | Jul 3 | Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by… Affected: 8.1.7; 8.1.7.1 |
| CVE-2001-0517 | – | Jul 21 | Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0 Affected: 8.1.6; 8.1.7 |
| CVE-2001-0516 | – | Jul 21 | Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect… Affected: All versions, or not specified |
| CVE-2001-0515 | – | Jul 21 | Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value Affected: through 8.1.7; 8.1.6 |
| CVE-2001-0499 | – | Jul 21 | Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1)… Affected: through 8.1.7 |
| CVE-2001-0498 | – | Jul 21 | Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection… Affected: through 8.1.7 |
| CVE-2001-0326 | – | May 3 | Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp… Affected: 8.1.7_r3 |
| CVE-2001-0126 | – | Mar 12 | Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in… Affected: 8.1.7 |
| CVE-2000-1180 | – | Jan 9 | Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument Affected: 8.1.5 |
| CVE-2000-0986 | – | Dec 19 | Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a… Affected: 8.1.5 |
| CVE-2000-0987 | – | Dec 19 | Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter Affected: 8.1.6 |
| CVE-2000-0206 | – | Mar 5 | The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges Affected: 8.1.5 |
| CVE-1999-0888 | – | Aug 16 | dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script Affected: 8.0.3; 8.0.4; 8.0.5; 8.0.5.1; 8.1.5 |
| CVE-1999-0711 | – | Apr 29 | The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root Affected: 8.0.3; 8.0.4; 8.0.5; 8.0.5.1; 8.1.5 |
Showing 46