Oracle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2003-1208 1Oracle 1Oracle9i Apr 16, 2026 Dec 3, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL,...Show more Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.Show less
CVE-2004-0837 3Debian MysqlOracle 3Debian Linux MysqlMysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 2.6 LOW· v2 MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
CVE-2004-0836 2Debian Oracle 2Debian Linux Mysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a...Show more Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).Show less
CVE-2004-0835 3Debian MysqlOracle 3Debian Linux MysqlMysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could all...Show more MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.Show less
CVE-2004-1349 2Gnu Oracle 2Gzip Solaris Apr 16, 2026 Oct 4, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
CVE-2004-0457 1Oracle 1Mysql Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2004-0637 1Oracle 2Oracle8i Oracle9i Apr 16, 2026 Sep 2, 2004 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
CVE-2004-1774 1Oracle 2Application Server Oracle10g Apr 16, 2026 Aug 31, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
CVE-2004-0230 7Juniper McafeeMicrosoft+4 more 12Junos NetbsdNetwork Data Loss Prevention+9 more May 2, 2025 Aug 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet,...Show more TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.Show less
CVE-2004-0543 1Oracle 2Applications E Business Suite Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
CVE-2004-1371 1Oracle 10Application Server Collaboration SuiteDatabase Server+7 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 9.0 HIGH· v2 Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
CVE-2004-1370 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2...Show more Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.Show less
CVE-2004-1369 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that r...Show more The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.Show less
CVE-2004-1368 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 7.8 HIGH· v2 ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
CVE-2004-1367 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.lo...Show more Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.Show less
CVE-2004-1366 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
CVE-2004-1365 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
CVE-2004-1364 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 8.5 HIGH· v2 Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
CVE-2004-1363 1Oracle 7Application Server Collaboration SuiteDatabase Server+4 more Apr 16, 2026 Aug 4, 2004 N/A· v4 9.8 CRITICAL· v3 7.2 HIGH· v2 Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
CVE-2004-1362 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access re...Show more The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.Show less

Previous 1...544545546...552 Next