← Back

Database Server

database_server

Vendor: Oracle • 516 CVEs

CVEs (516)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-3444
1Oracle
1Database Server
Apr 16, 2026
Nov 2, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and attack vectors, aka Oracle Vuln# DB26.
CVE-2005-3443
1Oracle
1Database Server
Apr 16, 2026
Nov 2, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17.
CVE-2005-3440
1Oracle
1Database Server
Apr 16, 2026
Nov 2, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB08.
CVE-2005-3438
1Oracle
1Database Server
Apr 16, 2026
Nov 2, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB1...Show more
Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.Show less
CVE-2005-3437
1Oracle
1Database Server
Apr 16, 2026
Nov 2, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.
CVE-2005-3206
1Oracle
1Database Server
Apr 16, 2026
Oct 14, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
CVE-2005-3205
1Oracle
1Database Server
Apr 16, 2026
Oct 14, 2005
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" comm...Show more
Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.Show less
CVE-2005-1197
1Oracle
1Database Server
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
CVE-2005-0298
1Oracle
1Database Server
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
CVE-2005-0701
1Oracle
1Database Server
Apr 16, 2026
Mar 7, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_...Show more
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.Show less
CVE-2005-0297
1Oracle
1Database Server
Apr 16, 2026
Jan 18, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.
CVE-2004-2345
1Oracle
1Database Server
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
CVE-2004-1339
1Oracle
2Database Server
Oracle9i
Apr 16, 2026
Dec 23, 2004
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new...Show more
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.Show less
CVE-2004-1338
1Oracle
2Database Server
Oracle9i
Apr 16, 2026
Dec 23, 2004
N/A· v4
N/A· v3
6.5 MEDIUM· v2
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE...Show more
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.Show less
CVE-2004-1371
1Oracle
10Application Server
Collaboration SuiteDatabase Server+7 more
Apr 16, 2026
Aug 4, 2004
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
CVE-2004-1363
1Oracle
7Application Server
Collaboration SuiteDatabase Server+4 more
Apr 16, 2026
Aug 4, 2004
N/A· v4
9.8 CRITICAL· v3
7.2 HIGH· v2
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
CVE-2003-0727
1Oracle
1Database Server
Apr 16, 2026
Oct 20, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
CVE-2003-0222
1Oracle
3Database Server
Oracle8iOracle9i
Apr 16, 2026
May 12, 2003
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long...Show more
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.Show less
CVE-2003-0096
1Oracle
3Database Server
Oracle8iOracle9i
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
9.0 HIGH· v2
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a...Show more
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.Show less
CVE-2003-0095
1Oracle
3Database Server
Oracle8iOracle9i
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applica...Show more
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.Show less