Rezultati pretraživanja za 'Proizvođač: oracle'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2004-2763 | 5.8 | The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that | 2009-06-02 04:00:00 | 2009-06-01 22:30:00 |
| CVE-2007-1442 | 7.2 | Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges. | 2008-11-15 06:44:00 | 2007-03-14 00:19:00 |
| CVE-2007-0183 | 6.8 | Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtai | 2008-11-15 06:39:00 | 2007-01-12 05:04:00 |
| CVE-2002-1118 | 5.0 | TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command. | 2008-09-11 00:03:00 | 2002-10-28 05:00:00 |
| CVE-2002-0856 | 5.0 | SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature. | 2008-09-10 19:13:00 | 2002-09-05 04:00:00 |
| CVE-2002-0659 | 5.0 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. | 2008-09-10 19:12:00 | 2002-08-12 04:00:00 |
| CVE-2002-0656 | 7.5 | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3. | 2008-09-10 19:12:00 | 2002-08-12 04:00:00 |
| CVE-2002-0655 | 7.5 | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code. | 2008-09-10 19:12:00 | 2002-08-12 04:00:00 |
| CVE-2002-0386 | 5.0 | The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET reque | 2008-09-10 19:11:00 | 2002-11-04 05:00:00 |
| CVE-2001-0516 | 5.0 | Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data. | 2008-09-10 19:08:00 | 2001-07-21 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/890
Zapisa po stranici: