131 matches found
Sql injection
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB17 in the Oracle Text component and 2 DB18 in the Program Interface Network component. NOTE: details are...
Sql injection
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB04 and 2 DB06 in the a Data Pump component; 3 DB10 in the b Net Listener component; and 4 DB16 in the c Oracle Text component. NOTE: details are...
CVE-2006-0265
CVE-2006-0265 involves multiple vulnerabilities in Oracle Database server (versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, 10.2.0.1). Connected sources (PRION entries) describe a likely SQL injection in CTXSYS and program interface/network components (DB17/DB18), with specific function names cited:...
CVE-2006-0259
Concise summary: CVE-2006-0259 relates to multiple unspecified vulnerabilities in Oracle Database Server 10.1.0.5, affecting the Data Pump component (DB04/DB06), Net Listener (DB10), and Oracle Text (DB16). The DB06 issue is alleged to be a SQL injection in specific GENERATE_JOB_NAME/GET_* and re...
CVE-2006-0259
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB04 and 2 DB06 in the a Data Pump component; 3 DB10 in the b Net Listener component; and 4 DB16 in the c Oracle Text component. NOTE: details are...
CVE-2006-0260
Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB05 in the a Data Pump component; 2 DB15 in the b Oracle Text component; 3 DB22 in the c Streams Apply component; 4 DB23 and 5 DB24 in th...
CVE-2006-0260
CVE-2006-0260 affects Oracle Database Server 9.2.0.7 and 10.1.0.5. The issue is described as a SQL injection vulnerability in SYS.DBMS_METADATA_UTIL (and related DBMS_METADATA packages) caused by insufficient input validation in multiple functions (e.g., LONG2VARCHAR/DBMS_METADATA_UTIL; MAKE_FILT...
CVE-2006-0260: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB05 in the a Data Pump component; 2 DB15 in the b Oracle Text component; 3 DB22 in the c Streams Apply component; 4 DB23 and 5 DB24 in th...
CVE-2006-0259: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB04 and 2 DB06 in the a Data Pump component; 3 DB10 in the b Net Listener component; and 4 DB16 in the c Oracle Text component. NOTE: details are...
CVE-2006-0265: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB17 in the Oracle Text component and 2 DB18 in the Program Interface Network component. NOTE: details are...
Oracle October 2005 CPU Problems
Examining the Oracle October 2005 Critical Patch Update in depth, NGSResearchers discovered a number of problems which have all since been reported to Oracle. As well as new vulnerabilities and problems with the patches for old vulnerabilities, the October 2005 CPU fails to install the patched...