Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle database server 10.1.0.2 vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2005-1197
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote malicious users to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
Oracle Database Server 10.1.0.2Oracle Database Server 10.1.0.3Oracle Database Server 10.1.0.3.1Oracle Database Server 10.1.0.4
756
VMScore
CVE-2007-5897
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be cover...
Oracle Database Server 9.2.0.2Oracle Database Server 9.2.0.3Oracle Database Server 10.1.0.2Oracle Database Server 10.1.0.3Oracle Database Server 9.2.0.6Oracle Database ServerOracle Database Server 9.2.0.4Oracle Database Server 9.2.0.5Oracle Database Server 10.1.0.4Oracle Database Server 9.2.0.1
445
VMScore
CVE-2005-0298
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
Oracle Database Server 10.1.0.3Oracle Database Server 10.1.0.3.1Oracle Database Server 9.2.0.5Oracle Database Server 9.2.0.6Oracle Database Server 10.1.0.2Oracle Database Server 9.0.1.5Oracle Database Server 9.0.4Oracle Database Server 9.2.0.4Oracle Database Server 8.1.7.4Oracle Database Server 9.0.1.4Oracle Database Server 8.0.6Oracle Database Server 8.0.6.3
801
VMScore
CVE-2007-2130
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.
Oracle Database Server 10.2.0.1Oracle Database Server 9.2.0.1Oracle Collaboration Suite 10.1.2Oracle Database Server 10.1.0.2Oracle E-business SuiteOracle Application Server 10.1.2.0.2Oracle Application Server 9.0.4.3
641
VMScore
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
725
VMScore
CVE-2004-1774
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g prior to 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
Oracle Application Server 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Standard 10.1.0.2
668
VMScore
CVE-2005-1495
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for malicious users to escape detection.
Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 10.1.0.3Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.1.3Oracle Application Server 10.1.0.3.1Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.3.1Oracle Oracle9i 9.2.0.1Oracle Oracle9i 9.2.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Oracle9i Release 2 9.2.1Oracle Oracle9i Release 2 9.2.2Oracle Application Server 10.1.0.2Oracle Application Server 10.1.0.3Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.2Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.0.2
668
VMScore
CVE-2006-0435
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and ...
Oracle Application ServerOracle Application Server 1.0.2Oracle Application Server 10.1.0.3Oracle Application Server 10.1.0.3.1Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.2Oracle Application Server 9.2.0.6Oracle Http Server 8.1.7Oracle Http Server 9.0.1Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Http Server 1.0.2.1Oracle Http Server 1.0.2.1s For AppsOracle Http Server 9.0.3.1Oracle Http Server 9.1Oracle Application Server 1.0.2.0
801
VMScore
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
409
VMScore
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook