CVE-2010-0851

CVE-2010-0851 affects the Oracle Database XML DB component. The vulnerability exists in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3, caused by an unspecified issue that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents...

CVE-2012-0534

CVE-2012-0534 affects Oracle Database Server (RDBMS Core) versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.2/11.2.0.3. Description: an unspecified vulnerability in the RDBMS Core allows remote authenticated users to affect integrity via unknown vectors related to Create Session. Impact: partia...

CVE-2014-4300

Technical details are not publicly available in the provided documents for CVE-2014-4300; no specifics on affected products, versions, vectors, or impact are given. Monitor for updates.

CVE-2004-1339

CVE-2004-1339 affects Oracle 9i and 10g via two default triggers (MDSYS.SDO_GEOM_TRIG_INS1 and MDSYS.SDO_LRS_TRIG_INS). The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the new.table_name or new.column_name parameters within those trigger...

CVE-2005-3440

Technical details about CVE-2005-3440 are not provided in the supplied documents. No affected product/version or concrete impact is documented here; monitor for updates.

CVE-2006-0283

CVE-2006-0283 refers to an unspecified vulnerability in Oracle products (Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, Collaboration Suite Release 2) and Oracle9i (9.0.4.2), linked to Oracle Vuln# DBC02 in the Reorganize Objects & Convert Tablespace component. Public descriptions do ...

CVE-2006-1868

CVE-2006-1868 affects Oracle Database Server 10.1.0.4, where a buffer overflow in the Advanced Replication component enables database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package (aka Vuln# DB03). The OpenVAS/Nessus records confirm multiple referen...

CVE-2006-1877

Technical details about CVE-2006-1877 are not provided in the supplied documents. The Oracle Spatial vulnerability is described as unspecified with unknown impact and vectors.

CVE-2009-1995

CVE-2009-1995 is an Oracle Database vulnerability affecting the Advanced Queuing component (SYS.DBMS_AQ_INV) in Oracle Database 10.2.0.4 and 11.1.0.7. The issue allows remote authenticated users to impact confidentiality and integrity. The connected documents indicate this CVE was addressed in th...

CVE-2012-1745

CVE-2012-1745 affects Oracle Database Server (versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3) in the Network Layer. The vulnerability is described as unspecified and allows remote attackers to affect availability via unknown vectors. The cited sources do not provide a concret...

CVE-2013-5853

CVE-2013-5853 is an Oracle Database Server Core RDBMS vulnerability affecting versions 11.1.0.7, 11.2.0.3, and 12.1.0.1 that could allow remote attackers to affect availability via unknown vectors. Connected sources corroborate the Core RDBMS impact and list this CVE among fixes in the January 20...

CVE-2014-6541

CVE-2014-6541 affects Oracle Database Server via the Recovery component (DBMS_IR) on Windows, impacting confidentiality for affected versions (11.1.0.7, 11.2.0.3/4, 12.1.0.1/2) when accessed by remote authenticated users. Connected sources indicate a single-vendor Oracle remediation path through ...

CVE-2016-5498

Technical details for CVE-2016-5498 are not publicly provided in the supplied documents. No concrete affected product/version or remediation is included here. Monitor for updates in the connected sources.

CVE-2016-5516

CVE-2016-5516 affects Oracle Database Server 12.1.0.2, specifically the Kernel PDB component. It is a local-denial-of-service style issue where a local user can affect availability via unknown vectors. The available connected documentation places this vulnerability among Oracle’s October 2016 CPU...

CVE-2005-0297

CVE-2005-0297 concerns a SQL injection vulnerability in Oracle Database 9i and 10g that allows remote attackers to execute arbitrary SQL commands and gain privileges. The available documents identify the affected product family (Oracle Database 9i/10g) and the underlying issue (SQL injection) wit...

CVE-2005-3443

Technical details and affected specifics for CVE-2005-3443 are not publicly provided in the supplied documents; monitor for updates.

CVE-2006-0257

CVE-2006-0257 concerns Oracle Database Server’s Change Data Capture (CDC) component. The entry notes an unspecified vulnerability with unspecified impact/attack vectors, later attributed by independent researchers to a possible SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILI...

CVE-2006-0290

Technical details for CVE-2006-0290 are not publicly disclosed in the provided documents; the entries only note an unspecified vulnerability in the Oracle Workflow Cartridge. Monitor for updates.

CVE-2006-5344

The CVE-2006-5344 issue concerns a buffer overflow in the Oracle Spatial component (SDO_CS.TRANSFORM_LAYER) of Oracle Database, exploitable by an authenticated user with EXECUTE privileges. Public details indicate the vulnerability affects Oracle Database 9.2.0.1 and 10.1.0.2, where crafting a ca...

CVE-2006-5345

CVE-2006-5345 is an unspecified vulnerability in the Oracle Spatial component of Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4. The entry notes remote authenticated attack vectors related to mdsys.sdo_geom and cites a possible relation to a length-checking issue in RELATE before MD2.RELATE is ca...

CVE-2007-2114

CVE-2007-2114 refers to multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2, specifically affecting Change Data Capture (CDC, DB08) and Oracle Instant Client (DB11). The description notes reliable claims that these issues are buffer overflows involving a long CHANGE_TABL...

CVE-2007-5507

CVE-2007-5507 concerns the Oracle Net Services GIOP service on the TNS Listener. The vulnerability, affecting Oracle Database 9.0.1.5+ and certain 9.x/10.x releases, arises when handling a connect GIOP packet with an invalid data size, causing a buffer over-read. This can allow remote attackers t...

CVE-2008-0342

The CVE-2008-0342 entry affects Oracle Database Upgrade/Downgrade component in Oracle Database versions 9.2.0.8, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified with unknown impact and remote attack vectors (DB05). No explicit root-cause, exploit details, or remediation are ...

CVE-2012-1746

CVE-2012-1746 concerns an unspecified vulnerability in the Oracle Database Server Network Layer on Windows, affecting versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.2/11.2.0.3. The vulnerability allows remote attackers to affect availability via unknown vectors; root cause details and exploi...

CVE-2019-2939

CVE-2019-2939 affects Oracle Database Server’s Core RDBMS component. Affected versions include 12.2.0.1, 18c, and 19c. The vulnerability allows a low-privileged attacker with Create Session privilege and network access via OracleNet to compromise Core RDBMS, potentially leading to unauthorized re...

CVE-2006-5336

Technical details for CVE-2006-5336 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2007-2109

CVE-2007-2109 affects Oracle Database 10.2.0.3 with reported issues in two components: (1) Rules Manager and Expression Filter (DB02) due to a race condition in the RLMGR_TRUNCATE_MAINT trigger that can change AUTHID from DEFINER to CURRENT_USER after TRUNCATE, and (2) Oracle Streams (DB06) due t...

CVE-2009-1994

CVE-2009-1994 is an Oracle Database 10.1.0.5 vulnerability in the Spatial component (MDSYS.PRVT_CMT_CBK). The issue is listed under the October 2009 CPU with CVSS v2 base score 6.5 (MEDIUM). It can be triggered by an authenticated remote user via Oracle Net to execute code on MDSYS.PRVT_CMT_CBK, ...

CVE-2009-3411

CVE-2009-3411 (Oracle Data Pump) affects Oracle Database components including Data Pump across multiple versions (11.1.0.7; 10.2.0.3/0.4; 10.1.0.5; 9.2.0.8/9.2.0.8DV). The vulnerability allows remote authenticated users to impact confidentiality and integrity via unknown vectors due to an unspeci...

CVE-2009-3412

CVE-2009-3412 affects Oracle Database components (Unzip) in 9.2.0.8, 9.2.0.8DV and 10.1.0.5, and Oracle Application Server 10.1.2.3. Root cause: Unzip component vulnerability enabling local logon and partial confidentiality impact. CVSS in NVD shows Low base score (Local, High auth, Partial confi...

CVE-2013-5858

CVE-2013-5858 is an unspecified vulnerability in the Core RDBMS of Oracle Database Server (versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1) that allows remote authenticated users to affect integrity via unknown vectors. The entry notes it is a separate issue from CVE-2015-0370. Connected document...

CVE-2026-34312

The CVE-2026-34312 entry concerns Oracle Database Server's RDBMS component with affected versions 19.3–19.30. It describes a vulnerability that an attacker with Row Access Method privilege and network access via multiple protocols can exploit to achieve unauthorized read access to a subset of RDB...

CVE-2005-3205

CVE-2005-3205 : XSS in Oracle9i iSQLPlus (iSQLPlus) for Oracle9i Database Server Release 2 (9.0.2.4). The vulnerability arises in the iSQL Plus interface when using the command set markup HTML TABLE, allowing remote attackers to inject arbitrary script/HTML that executes when a user selects a tab...

CVE-2006-0291

Technical details for CVE-2006-0291 are not publicly available in the provided documents. Affected Oracle components are listed but no concrete root cause, impact, or fix information is disclosed here; monitor for updates.

CVE-2006-1870

CVE-2006-1870 concerns Oracle Database Server components’ Export functionality (DB05) with an issue in the DBMS_EXPORT_EXTENSION package. Connected documents provide concrete details for CVE-2006-2081, which states that the issue allows local users to execute arbitrary SQL through GET_DOMAIN_INDE...

CVE-2006-3698

Oracle Database 10.1.0.5 is affected by multiple SQL injection-related vulnerabilities in two components: Change Data Capture (CDC) via SYS.DBMS_CDC_IMPDP procedures (IMPORT_CHANGE_SET/TRIGGERs etc.) and the Data Pump Metadata API via SYS.KUPW$WORKER.MAIN. The issues are described in CVE-2006-369...

CVE-2007-2110

CVE-2007-2110 affects Oracle Database on Windows, targeting the Core RDBMS. The vulnerability (DB03) arises from the RDBMS using a NULL DACL for the Oracle process and certain shared memory sections, enabling local users to inject threads and execute arbitrary code via OpenProcess, OpenThread, an...

CVE-2007-2113

CVE-2007-2113 affects Oracle Database (Upgrade/Downgrade component, DBMS_UPGRADE_INTERNAL) and is described as a SQL injection vulnerability in Oracle Database 10.1.0.5. The issue allows remote authenticated users to execute arbitrary SQL via unknown vectors; the description notes this DB07 may c...

CVE-2007-3855

CVE-2007-3855 affects multiple Oracle Database versions (9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3) with vulnerabilities in the DataGuard component (SYS.DRMS), the PL/SQL component (SYS.DBMS_STANDARD), the Spatial component (MDSYS.RTREE_IDX), and the SQL Compiler (DB17). The description no...

CVE-2007-3856

CVE-2007-3856 affects the Oracle Data Mining component of Oracle Database (versions 10g Release 2 10.2.0.2/10.2.0.3; 10g 10.1.0.5; Oracle9i 9.2.0.7/9.2.0.8/9.2.0.8DV). The vulnerability has unknown impact with remote authenticated vectors related to DMSYS.DMP_SYS (aka DB04). Connected sources con...

CVE-2007-5506

The CVE-2007-5506 entry concerns Oracle Database Core RDBMS components (versions 9.0.1.5+; 9.2.0.8; 9.2.0.8DV; 10.1.0.5; 10.2.0.3) where a remote attacker can cause a denial of service by sending a crafted type 6 Data packet (DB20). The vulnerability is a DoS affecting CPU usage, with no document...

CVE-2007-5513

The CVE-2007-5513 entry concerns Oracle Database XML DB (XMLDB) component in versions 9.2.0.8, 9.2.0.8DV, and 10.1.0.5. The issue is in audit trail entries for USERID: long usernames get trimmed to five characters, and shorter entries may contain extra characters from previous usernames (DB23). T...

CVE-2009-2000

CVE-2009-2000 is an Oracle Database vulnerability affecting the Authentication component in Oracle Database 11.1.0.7. The issue is exploitable remotely via Oracle Net with no authentication, exposing confidentiality (C:P) and providing no impact on integrity or availability per the NVD entry (CVS...

CVE-2009-3410

CVE-2009-3410 is an unspecified vulnerability in the Oracle Database RDBMS component affecting Oracle Database 11.1.0.7, 10.2.0.3/4, 10.1.0.5, 9.2.0.8 and 9.2.0.8DV. It allows remote authenticated users to affect confidentiality and integrity via unknown vectors. CVSS v2 base score: 3.6 (Low). Th...

CVE-2010-0854

CVE-2010-0854 affects Oracle Database (versions including 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7) in the Audit component. The issue is described as an unspecified vulnerability that could let remote authenticated users influence integrity related to auditing on tables, per the NVD entry...

CVE-2012-3151

Technical details (affected products, versions, root cause, exploitability, impact, and fixes) are not publicly provided in the connected documents for CVE-2012-3151. Monitor for updates from Oracle and vendor advisories.

CVE-2005-4884

CVE-2005-4884 concerns an unspecified vulnerability in the Oracle OLAP component of Oracle Database Server 10.1.0.4 (10g) that allows remote authenticated attackers to affect availability via unknown vectors (DB02). Affected product/version information is stated in the NVD/Red Hat records; exploi...

CVE-2006-0266

Technical details for CVE-2006-0266 are not publicly provided in the supplied documents. No concrete information on affected product/version, root cause, impact, or remediation is available here; monitor for updates.

CVE-2006-0548

CVE-2006-0548 : SQL injection in the Oracle Text component of Oracle Database 10g (and possibly earlier) . The vulnerability arises from inadequate input validation in Oracle Text, potentially allowing remote attackers to execute arbitrary SQL via unknown vectors. Public sources reference related...

CVE-2006-1874

CVE-2006-1874 affects Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 in the Oracle Spatial component (DB09). The issue is described as a SQL injection in MDSYS.PRVT_IDX via the functions EXECUTE_INSERT, EXECUTE_DELETE, EXECUTE_UPDATE, EXECUTE UPDATE, and CRT_DUMMY. OpenVAS/Nessus entries co...