CVE-2007-5515

Technical details for CVE-2007-5515 are not publicly available in the provided documents; the entries only note an unspecified Spatial component vulnerability with unknown impact. Monitor for updates.

CVE-2012-0072

CVE-2012-0072 concerns an unspecified vulnerability in the Listener component of Oracle Database Server versions 10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, and 11.2.0.2. According to the description, it allows remote attackers to affect availability via unknown vectors. The provided documents do not ...

CVE-2012-0520

CVE-2012-0520 affects Oracle EM Base Platform in Oracle Database Server (10.2.0.3–11.2.0.2) and Oracle Enterprise Manager Grid Control (10.2.0.5, 11.1.0.1). The flaw is described as an unspecified vulnerability enabling remote integrity impact via unknown vectors related to Security Framework. No...

CVE-2012-3151

Technical details (affected products, versions, root cause, exploitability, impact, and fixes) are not publicly provided in the connected documents for CVE-2012-3151. Monitor for updates from Oracle and vendor advisories.

CVE-2005-4884

CVE-2005-4884 concerns an unspecified vulnerability in the Oracle OLAP component of Oracle Database Server 10.1.0.4 (10g) that allows remote authenticated attackers to affect availability via unknown vectors (DB02). Affected product/version information is stated in the NVD/Red Hat records; exploi...

CVE-2006-0270

The CVE-2006-0270 entry concerns Oracle Database Server 10.2.0.1 where the Transparent Data Encryption (TDE) Wallet master encryption key is stored in plaintext in the SGA. This plaintext storage could allow a local attacker with SGA access to retrieve the key and decrypt sensitive data. The issu...

CVE-2006-1876

The CVE relates to Oracle Database Server 9.2.0.7 and 10.1.0.4 with Oracle Spatial, where the issue is believed to be a SQL injection vulnerability in the MDSYS.SDO_PRIDX package (GEN_RID_RANGE_BY_AREA and GEN_RID_RANGE functions). Details are not publicly disclosed by Oracle; impact and attack v...

CVE-2006-5342

CVE-2006-5342 pertains to an unspecified vulnerability in Oracle Spatial within Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3. The impact is unknown and it involves remote authenticated access vectors tied to mdsys.sdo_tune; there are reports suggesting the issue could be related to SQL injectio...

CVE-2012-0512

CVE-2012-0512 is a SQL Injection vulnerability in Oracle Enterprise Manager components (Database Control 11.1.0.7, 11.2.0.2 and Grid Control 10.2.0.4/earlier) related to the compareWizFirstConfig page. The flaw allows remote, authenticated attackers to execute SQL with SYSMAN privileges via the f...

CVE-2012-3134

CVE-2012-3134 affects Oracle Database Server core RDBMS component for versions 11.1.0.7, 11.2.0.2, and 11.2.0.3. The vulnerability is described as enabling remote authenticated users to impact availability via unknown vectors. Exploitation details are not provided in the supplied documents; no ex...

CVE-2013-1519

CVE-2013-1519 affects the Oracle Application Express component in Oracle Database Server prior to 4.2.1, potentially allowing a remote attacker to impact integrity through unknown vectors. The description is general and does not specify affected configurations beyond the 4.2.1 cutoff, nor explici...

CVE-2001-0832

Root cause: gv on Unix contains a buffer overflow due to an unsafe sscanf usage when parsing PostScript/PDF, enabling local arbitrary-code execution with victim privileges. Exploitation requires user to view a malicious file (PoC exists in historical disclosures); affected versions referenced in ...

CVE-2001-0941

CVE-2001-0941 is a vulnerability in Oracle’s dbsnmp where a buffer overflow occurs in versions 8.0.6 through 9.0.1. The flaw allows local users to execute arbitrary code by supplying a long ORACLE_HOME environment variable, indicating the overflow happens via environment data passed to dbsnmp. Af...

CVE-2006-1867

Technical details for CVE-2006-1867 are not publicly available in the provided documents. The entries reference Oracle 9.2.0.6 Advanced Replication with unknown impact and attack vectors. Monitor for authoritative updates and vendor advisories.

CVE-2006-3702

CVE-2006-3702 covers multiple Oracle Database vulnerabilities across versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 with unspecified impact/attack vectors. Connected sources tie DB06 to a SQL injection-style issue in DBMS_EXPORT_EXTENSION, specifically GET_DOMAIN_INDEX_METADATA, which...

CVE-2006-5333

The CVE-2006-5333 entry concerns Oracle Database 10.2.0.2 with the Spatial component. The vulnerability is tied to the SDO_DROP_USER_BEFORE package and a Trigger that can DROP a user within an anonymous PL/SQL block, potentially enabling SQL injection via remote authenticated attempts that exploi...

CVE-2006-5339

CVE-2006-5339 affects the Oracle Spatial component of Oracle Database (versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.4). The vulnerability is linked to the mdsys.sdo_geom path and is related to a suspected length-checking issue before MD2.RELATE is called, as reported by third parties. The described...

CVE-2007-5514

CVE-2007-5514 pertains to Oracle Database 10.2.0.3 and involves multiple vulnerabilities affecting the Database Vault component (DB24) and the SQL Execution component (DB26). The initial description states unknown impact and attack vectors for these components. A connected Nessus CPU plugin (Octo...

CVE-2005-3438

Oracle Database vulnerability CVE-2005-3438 involves a buffer overflow in the built-in package sys.pbsde.init, affecting Oracle Database Server 9i up to 10.1.0.4.2. Exploitation could allow execution of arbitrary code or a denial-of-service condition, with exploits documented for 10g (10.1.0.2) a...

CVE-2006-0268

The CVE-2006-0268 entry concerns an unspecified vulnerability in the Security component of Oracle Database Server, affecting Oracle versions 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4. The connected OpenVAS/Nessus references corroborate Oracle Database multiple vulnerabilities, but the exact ro...

CVE-2006-0551

Technical details for CVE-2006-0551 are not publicly provided in the supplied documents. Monitoring for updates is advised, as the corpus does not specify affected versions, vectors, or remediation information.

CVE-2006-1866

CVE-2006-1866 affects Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5 and other versions, with unknown impact/attack vectors in (1) Advanced Replication (DB01) and (2) Oracle Spatial (DB10). Oracle reportedly did not publicly disclose details as of 20060421, but claims exist that DB01 ...

CVE-2006-1871

CVE-2006-1871 is a SQL injection vulnerability in Oracle Database Server (versions 9.2.0.7 and 10.1.0.5) that allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package. The issue is documented with an impact assessm...

CVE-2006-5335

CVE-2006-5335 affects Oracle Database 10.1.0.5 and 10.2.0.2, with issues reported in the CDC and Spatial areas. The linked CERT entry attributes a PL/SQL injection-style vulnerability to the SYS.DBMS_CDC_IMPDP package, tied to BUMP_SEQUENCE (DB04) and related CDC/Spatial procedures (CREATE_SUBSCR...

CVE-2007-5509

CVE-2007-5509 affects Oracle Database (Spatial component) and is documented as an unspecified vulnerability in Oracle Database 9.2.0.8 and 9.2.0.8DV with unknown impact and remote attack vectors. The connected materials confirm the affected product/component and version range, but do not provide ...

CVE-2007-5511

CVE-2007-5511 is a SQL injection vulnerability in Oracle Database Workspace Manager (SYS.LT.FINDRICSET) that allows an attacker to execute arbitrary SQL via the vulnerable parameter. The flaw affects Workspace Manager components prior to OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0. Public w...

CVE-2010-0860

CVE-2010-0860 affects Oracle Database Core RDBMS components in 9.2.0.8 (and DV variants), 10.1.0.5, 10.2.0.4, and 11.1.0.7. The vulnerability allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege. The issu...

CVE-1999-0784

The CVE-1999-0784 entry describes a Denial of Service against Oracle TNSLSNR SQLNet Listener caused by a malformed string sent to the listener port (NERP). Affected component: Oracle TNSLSNR SQL Net Listener. The root cause is a malformed input to the listener port that can trigger a DoS. The pro...

CVE-2001-0831

The CVE-2001-0831 issue concerns Oracle Label Security in Oracle 8.1.7 and 9.0.1. The vulnerability is triggered when audit functionality, SET_LABEL, or SQL*Predicate is used, enabling local users to gain additional access. This is a local privilege escalation vulnerability affecting the listed O...

CVE-2005-3444

The CVE-2005-3444 entry concerns Oracle Database Server (8i–9.2.0.5) with multiple unspecified vulnerabilities in the Programmatic Interface. The description notes unknown impact and attack vectors. The CVSS data provided indicates a high-severity base score (10.0) with network attack vector and ...

CVE-2006-5340

Oracle Database Spatial component vulnerabilities (CVE-2006-5340) affect multiple releases (8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, 10.2.0.2). The issue is linked to the MDSYS.SDO_LRS package, specifically the convert_to_lrs_layer function, and to a vulnerability elsewhere in the Spatial stack (DB17...

CVE-2007-2111

CVE-2007-2111 describes an SQL injection vulnerability in Oracle Database affecting SYS.DBMS_AQADM_SYS, with vulnerable versions 9.0.1.5, 9.2.0.7, and 10.1.0.5. The issue allows remote authenticated users to inject arbitrary SQL via unknown vectors (DB04). According to the NVD entry, the CVSS bas...

CVE-2007-5510

CVE-2007-5511 relates to an SQL injection vulnerability in Oracle Database's SYS.LT.FINDRICSET function (Workspace/ LT package), exploitable via an Evil Cursor technique to escalate privileges to SYS. Reported for Oracle Database around 10g (pre-10.2.0.x), with exploitation potentially performed ...

CVE-2009-2001

CVE-2009-2001 details (Oracle DB): Unspecified vulnerability in the PL/SQL component of Oracle Database 10.2.0.4 and 11.1.0.7. Exploitation requires remote access with authentication and can affect confidentiality, integrity, and availability . The Oracle October 2009 CPU documents this as a PL/S...

CVE-2002-0856

The CVE-2002-0856 entry concerns the SQL*NET listener in Oracle Net for Oracle9i (versions 9.0.x and 9.2). The vulnerability is a denial-of-service caused by handling of certain debug requests in the debugging feature, which are not processed correctly, allowing remote attackers to crash the serv...

CVE-2002-0857

The CVE-2002-0857 entry describes a format-string vulnerability in Oracle’s Listener Control Utility (LSNRCTL) used to administer Listeners. Affects Oracle 9.2 and 9.0, 8.1, and 7.3.4; by inserting format specifiers into the Listener configuration (listener.ora) or supplying crafted commands, an ...

CVE-2006-1872

Technical details about CVE-2006-1872 are not publicly available in the provided documents. Monitor for updates from sources in connected documents; no concrete affected products, root cause, impact, or remediation can be stated from the supplied data.

CVE-2006-5337

CVE-2006-5337 affects Oracle Database Core RDBMS in versions 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2. The issue is described as an unspecified vulnerability in the Core RDBMS component with unknown impact and remote authenticated attack vectors (aka Vuln# DB09). The connected documents corrobora...

CVE-2007-2115

CVE-2007-2115 affects Oracle Database CDC (Change Data Capture) in versions 9.2.0.7, 10.1.0.5, and 10.2.0.2. The connected documents indicate multiple SQL injection vulnerabilities in DBMS_CDC_PUBLISH, triggered by remote authenticated vectors involving the CDC.jar Java classes. The impact is des...

CVE-2007-6260

CVE-2007-6260 affects Oracle 10g and llg installations where accounts are created with default passwords, enabling remote login by connecting to the Listener. The underlying cause is default credentials during setup. In practice, DBCA installations may mitigate this by disabling accounts or chang...

CVE-2010-0852

CVE-2010-0852 affects Oracle Database XML DB component across versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected NVD entry provides a CVS...

CVE-2026-46834

The CVE-2026-46834 entry concerns Oracle Database Server’s Net Service component. Affected versions are 23.4.0 through 23.26.2. The vulnerability is remotely exploitable by an unauthenticated attacker over TLS, enabling a hang or frequent crash of Net Service (complete DOS) as described in the so...

CVE-2002-1767

CVE-2002-1767 describes a buffer overflow in Oracle 8i Database Server 8.1.5 for Linux, specifically in tnslsnr, that allows local users to execute arbitrary code as the oracle user via a long command line argument. The affected component is the tnslsnr process; root cause is improper handling of...

CVE-2006-1873

Technical details about CVE-2006-1873 are not publicly available in the provided documents; no concrete impact, vectors, or mitigations are described. Monitor for updates as more information may be released.

CVE-2006-3699

CVE-2006-3699 affects Oracle Database Core RDBMS components in versions 9.0.1.5 and 9.2.0.6. The description remains: an unspecified vulnerability with unknown impact/attack vectors (aka Oracle Vuln# DB02). The connected Nessus entry lists this CVE among July 2006 CPU fixes but provides no furthe...

CVE-2006-3703

CVE-2006-3703 concerns InterMedia for Oracle Database across versions 9.0.1.5, 9.2.0.6, and 10.1.0.4. The description in the NVD entry characterizes this as an unspecified vulnerability with unknown impact and attack vectors, and the connected data confirms InterMedia as the affected component wi...

CVE-2006-5334

CVE-2006-5334 affects Oracle Database with the Spatial component in versions 9.0.1.5, 9.2.0.7, and 10.1.0.5. The connected sources corroborate a vulnerability (DB03) with unknown impact and possible remote authenticated vectors related to mdsys.md2, including reported links to (1) a potential buf...

CVE-2006-5338

The CVE-2006-5338 entry concerns Oracle Database 10.1.0.5 Core RDBMS. The connected data confirms a vulnerability in the DBMS_SQLTUNE area (sys.dbms_sqltune or related internal components) that is associated with remote, authenticated access and is characterized by suspected SQL injection vectors...

CVE-2006-7067

CVE-2006-7067 affects Oracle 10g R2 (and possibly other versions). The vulnerability arises when an attacker can issue an invalid ALTER SESSION SET EVENTS command, which may trigger internal errors and potentially cause other impacts as described in the description. The connected documents do not...

CVE-2009-1965

CVE-2009-1965 affects Oracle Database Net Foundation Layer in 9.2.0.8 and 10.1.0.5. The vulnerability can be exploited remotely over the network via adjacent access, leading to partial confidentiality, integrity, and availability impacts. The Oracle October 2009 Critical Patch Update provides fix...