Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
OracleDatabase Server10.1.0.4

24 matches found

CVE
CVE•added 2009/07/14 11:30 p.m.•105 views

CVE-2009-1019

Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

7.5CVSS6.1AI score0.11053EPSS
CVE
CVE•added 2007/11/08 9:46 p.m.•60 views

CVE-2007-5897

Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515...

8.5CVSS7.3AI score0.03222EPSS
CVE
CVE•added 2005/05/02 4:0 a.m.•59 views

CVE-2005-1197

SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

7.5CVSS7.8AI score0.00899EPSS
CVE
CVE•added 2006/07/21 2:3 p.m.•56 views

CVE-2006-3704

Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.

10CVSS6.4AI score0.02497EPSS
CVE
CVE•added 2006/02/04 2:2 a.m.•55 views

CVE-2006-0547

Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of t...

7.5CVSS7.2AI score0.09005EPSS
CVE
CVE•added 2005/11/02 11:3 a.m.•54 views

CVE-2005-3445

Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.

10CVSS9.2AI score0.02021EPSS
CVE
CVE•added 2007/01/17 2:28 a.m.•54 views

CVE-2007-0272

Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05.

8.5CVSS7.1AI score0.29861EPSS
CVE
CVE•added 2006/07/21 2:3 p.m.•51 views

CVE-2006-3700

Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and Versioning (DAV) and (2) DB23 for XMLDB.

10CVSS6.6AI score0.02902EPSS
CVE
CVE•added 2006/10/18 1:7 a.m.•51 views

CVE-2006-5344

Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_3gl, aka Vuln# DB20, and (2) mdsys.sdo_cs, aka DB21. NOTE: as of 20061023, Oracle has not ...

9CVSS7.4AI score0.1641EPSS
CVE
CVE•added 2006/10/18 1:7 a.m.•48 views

CVE-2006-5332

Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln# DB01. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB01 is for PL/SQL injection ...

9CVSS6.4AI score0.05101EPSS
CVE
CVE•added 2006/10/18 1:7 a.m.•47 views

CVE-2006-5345

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 i...

9CVSS5.7AI score0.06062EPSS
CVE
CVE•added 2007/01/17 2:28 a.m.•47 views

CVE-2007-0270

Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via the GET_PROPERTY function in SYS.DBMS_DRS, aka DB03.

6.5CVSS7.2AI score0.15798EPSS
CVE
CVE•added 2006/01/18 11:3 a.m.•46 views

CVE-2006-0267

Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20.

9CVSS6.3AI score0.01326EPSS
CVE
CVE•added 2006/04/20 10:2 a.m.•44 views

CVE-2006-1868

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

7.5CVSS7.3AI score0.14767EPSS
CVE
CVE•added 2007/04/18 6:19 p.m.•44 views

CVE-2007-2110

Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access...

4.4CVSS6.9AI score0.00124EPSS
CVE
CVE•added 2006/10/18 1:7 a.m.•41 views

CVE-2006-5339

Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties th...

9CVSS5.7AI score0.06062EPSS
CVE
CVE•added 2006/04/20 10:2 a.m.•40 views

CVE-2006-1876

Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12. NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher...

9CVSS7AI score0.01694EPSS
CVE
CVE•added 2005/11/02 11:2 a.m.•38 views

CVE-2005-3437

Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.

10CVSS6.5AI score0.0321EPSS
CVE
CVE•added 2010/01/25 9:30 p.m.•37 views

CVE-2005-4884

Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to affect availability via unknown vectors, aka DB02.

6.8CVSS5.8AI score0.00361EPSS
CVE
CVE•added 2006/02/04 2:2 a.m.•37 views

CVE-2006-0551

SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cann...

7.5CVSS7.6AI score0.01489EPSS
CVE
CVE•added 2007/01/17 2:28 a.m.•37 views

CVE-2007-0277

Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or impdp, aka DB11.

6.8CVSS5.9AI score0.00373EPSS
CVE
CVE•added 2006/01/18 11:3 a.m.•36 views

CVE-2006-0268

Unspecified vulnerability in the Security component of Oracle Database server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB21.

9CVSS6.3AI score0.01326EPSS
CVE
CVE•added 2006/07/21 2:3 p.m.•36 views

CVE-2006-3703

Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.

9CVSS6.4AI score0.0199EPSS
CVE
CVE•added 2006/04/20 10:2 a.m.•35 views

CVE-2006-1873

Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB08.

9CVSS5.9AI score0.02179EPSS