Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle database server - vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2005-0298
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
Oracle Database Server 10.1.0.3Oracle Database Server 10.1.0.3.1Oracle Database Server 9.2.0.5Oracle Database Server 9.2.0.6Oracle Database Server 10.1.0.2Oracle Database Server 9.0.1.5Oracle Database Server 9.0.4Oracle Database Server 9.2.0.4Oracle Database Server 8.1.7.4Oracle Database Server 9.0.1.4Oracle Database Server 8.0.6Oracle Database Server 8.0.6.3
8.5
CVSSv2
CVE-2007-5897
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be cover...
Oracle Database Server 9.2.0.2Oracle Database Server 9.2.0.3Oracle Database Server 10.1.0.2Oracle Database Server 10.1.0.3Oracle Database Server 9.2.0.6Oracle Database ServerOracle Database Server 9.2.0.4Oracle Database Server 9.2.0.5Oracle Database Server 10.1.0.4Oracle Database Server 9.2.0.1
5.5
CVSSv2
CVE-2012-0082
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.
Oracle Database Server 10.2.0.4Oracle Database Server 10.2.0.5Oracle Database Server 11.2.0.3Oracle Database Server 11.1.0.7Oracle Database Server 11.2.0.2Oracle Database Server 10.1.0.5Oracle Database Server 10.2.0.3
7.5
CVSSv2
CVE-2012-1675
The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote malicious users to execute arbitrary ...
Oracle Database Server 10.2.0.3Oracle Database Server 10.2.0.5Oracle Database Server 11.1.0.7Oracle Database Server 11.2.0.2Oracle Database Server 11.2.0.3Oracle Database Server 10.2.0.4Oracle Database Server 11.2.0.4
7.5
CVSSv2
CVE-2006-0547
Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authen...
Oracle Database Server 10.1.0.3Oracle Database Server 10.2.0.1Oracle Database Server 8.1.7.4Oracle Database Server 9.2.0.6Oracle Database Server 9.2.0.7Oracle Database Server 10.1.0.4Oracle Database Server 10.1.0.5
6.5
CVSSv2
CVE-2009-0972
Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Oracle Database Server 10.1.0.5Oracle Database Server 11.1.0.6Oracle Database Server 11.1.0.7Oracle Database Server 9.2.0.8Oracle Database Server 10.2.0.4Oracle Database Server 9.2.0.8dvOracle Database Server 10.2.0.3
3.6
CVSSv2
CVE-2011-0804
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Oracle Database Server 10.2.0.3Oracle Database Server 10.2.0.5Oracle Database Server 11.1.0.7Oracle Database Server 11.2.0.1Oracle Database Server 11.2.0.2Oracle Database Server 10.2.0.4
6.5
CVSSv2
CVE-2011-3512
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Oracle Database Server 10.1.0.5Oracle Database Server 11.2.0.2Oracle Database Server 10.2.0.5Oracle Database Server 11.1.0.7Oracle Database Server 10.2.0.3Oracle Database Server 10.2.0.4
5
CVSSv2
CVE-2012-1745
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote malicious users to affect availability via unknown vectors.
Oracle Database Server 10.2.0.3Oracle Database Server 10.2.0.4Oracle Database Server 10.2.0.5Oracle Database Server 11.1.0.7Oracle Database Server 11.2.0.2Oracle Database Server 11.2.0.3
5
CVSSv2
CVE-2012-1747
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote malicious users to affect availability via unknown vectors, a different vulnerability than CVE...
Oracle Database Server 10.2.0.5Oracle Database Server 11.1.0.7Oracle Database Server 10.2.0.3Oracle Database Server 10.2.0.4Oracle Database Server 11.2.0.2Oracle Database Server 11.2.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook