Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: oracle'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2005-3641 7.5 Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username. 2008-09-05 20:54:00
CVE-2002-2347 4.3 Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbi 2008-09-05 20:32:00
CVE-2002-2345 7.5 Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access. 2008-09-05 20:32:00
CVE-2002-1882 7.5 Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors. 2008-09-05 20:31:00
CVE-2002-1858 5.0 Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the W 2008-09-05 20:31:00
CVE-2002-1856 5.0 HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-IN 2008-09-05 20:31:00
CVE-2002-1631 7.5 SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter. 2008-09-05 20:31:00
CVE-2002-1641 10.0 Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors. 2008-09-05 20:31:00
CVE-2002-1089 5.0 rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks. 2008-09-05 20:29:00
CVE-2002-1042 5.0 Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequence 2008-09-05 20:29:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/890
Zapisa po stranici: