Oracle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2000-0169 1Oracle 1Application Server Apr 16, 2026 Mar 15, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
CVE-2000-0206 1Oracle 1Oracle8i Apr 16, 2026 Mar 5, 2000 N/A· v4 N/A· v3 6.2 MEDIUM· v2 The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVE-2000-0148 1Oracle 1Mysql Apr 16, 2026 Feb 8, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
CVE-2000-0045 1Oracle 1Mysql Apr 16, 2026 Jan 11, 2000 N/A· v4 N/A· v3 6.4 MEDIUM· v2 MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
CVE-1999-1547 1Oracle 1Web Listener Apr 16, 2026 Nov 25, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
CVE-1999-0888 1Oracle 2Database Server Oracle8i Apr 16, 2026 Aug 16, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
CVE-1999-0711 1Oracle 1Oracle8i Apr 16, 2026 Apr 29, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
CVE-1999-1256 1Oracle 1Database Assistant Apr 16, 2026 Mar 4, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password...Show more Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.Show less
CVE-1999-1188 1Oracle 1Mysql Apr 16, 2026 Dec 27, 1998 N/A· v4 N/A· v3 4.6 MEDIUM· v2 mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.
CVE-1999-1125 1Oracle 1Http Server Apr 16, 2026 Sep 19, 1997 N/A· v4 N/A· v3 10.0 HIGH· v2 Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modif...Show more Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.Show less
CVE-1999-0524 11Apple CiscoHp+8 more 14Aix BsdosHp Ux+11 more May 28, 2026 Aug 1, 1997 N/A· v4 4.0 MEDIUM· v3 2.1 LOW· v2 ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-1999-1068 1Oracle 1Http Server Apr 16, 2026 Jul 23, 1997 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
CVE-1999-0046 10Bsdi DebianDigital+7 more 10Aix Bsd OsDebian Linux+7 more Apr 16, 2026 Feb 6, 1997 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow of rlogin program using TERM environmental variable.

Previous 1...529 530 531 532533