oracle database server 10.2.1 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in Oracle Database 9i and 10g allows remote malicious users to execute arbitrary SQL commands and gain privileges.

Oracle Database Server Oracle Database Server 10.2.1

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

Oracle Database Server 10.2.1 Oracle Database Server 10.2.2 Oracle Database Server 10.2.3

Oracle 10g R2 and possibly other versions allows remote malicious users to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments. NOTE: this issue was originally disputed by a third party, but the disp...

Oracle Database Server 10.2.1

SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote malicious users to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.

Oracle Oracle9i 9.0.1.3 Oracle Oracle9i 9.0.1.4 Oracle Oracle9i 9.2.0.2 Oracle Oracle9i 9.0.1 Oracle Oracle9i 9.0.1.2 Oracle Oracle9i 9.0.2.3 Oracle Oracle9i 9.2.0.1 Oracle Database Server 10.2.1 Oracle Oracle9i 9.0 Oracle Oracle9i 9.0.2.0.1 Oracle Oracle9i 9.0.2.1 Oracle Oracle9i 9.0.2.2 Oracle Oracle9i 9.0.2 Oracle Oracle9i 9.0.2.0.0

The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the S...

Oracle Oracle9i 9.0.1.2 Oracle Oracle9i 9.0.1.3 Oracle Oracle9i 9.0.2.3 Oracle Oracle9i 9.2.0.1 Oracle Oracle9i 9.0.1.4 Oracle Oracle9i 9.0.2 Oracle Oracle9i 9.2.0.2 Oracle Database Server 10.2.1 Oracle Oracle9i 9.0.2.0.0 Oracle Oracle9i 9.0.2.0.1 Oracle Oracle9i 9.0 Oracle Oracle9i 9.0.1 Oracle Oracle9i 9.0.2.1 Oracle Oracle9i 9.0.2.2

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Pivotal Software Spring Security Vmware Spring Framework 5.0.5 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.4 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 10.1 Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6.0 Oracle Communications Converged Application Server Oracle Communications Diameter Signaling Router Oracle Communications Network Integrity Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Enterprise Manager For Mysql Database 13.2 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Enterprise Manager Ops Center 12.3.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook