Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle10g vulnerabilities and exploits

(subscribe to this query)
770
VMScore
CVE-2005-4832
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different v...
Oracle Oracle10g Enterprise 9.0.4 .0Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Standard 10.2.0.1Oracle Oracle10g Standard 10.2.3Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Personal 10.1.0.3Oracle Oracle10g Enterprise 10.2.3Oracle Oracle10g Enterprise 9.0.4.0Oracle Oracle10g Personal 10.2.3Oracle Oracle10g Personal 9.0.4.0Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Standard 10.1 .0.2Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.3.1Oracle Oracle10g Standard 9.0.4.0Oracle Oracle10g Standard 9.0.4 .0Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle10g Enterprise 10.1.0.4
409
VMScore
CVE-2005-1496
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
Oracle Application Server 10.1.0.2Oracle Application Server 10.1.0.3Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 10.1.0.3Oracle Application Server 10.1.0.3.1Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.3.1
765
VMScore
CVE-2006-0586
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote malicious users to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT package; and (4) UPDATE_JOB, (...
Oracle Oracle10g Personal 10.1.0.3Oracle Application Server 10.1.2.0.2Oracle Oracle10g Standard 10.1.0.3.1Oracle Application Server 10.1.2.1.0Oracle Application Server 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Standard 10.1.0.4Oracle Application Server 10.1.2.0.1Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Personal 10.10.3.1Oracle Application Server 10.1.0.4Oracle Oracle10g Enterprise 10.1.0.2Oracle Application Server 10.1.0.2Oracle Oracle10g Standard 10.1.0.4.2Oracle Application Server 10.1.0.3.1Oracle Application Server 10.1.2Oracle Oracle10g Personal 10.1.0.4
187
VMScore
CVE-2006-1705
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.
Oracle Oracle10g Enterprise 10.2.3Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 10.1.0.3Oracle Oracle10g Standard 10.1.0.4Oracle Oracle10g Standard 10.1.0.4.2Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Standard 9.2Oracle Oracle9i Standard 9.2.0.1Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Personal 10.1.0.4Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Standard 10.2.0.1Oracle Oracle9i Enterprise 9.2.0.6Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.2.0.2Oracle Oracle9i Standard 9.2.0.3Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Personal 10.2.3Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Standard 10.2.3
801
VMScore
CVE-2006-0272
Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a bu...
Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle10g Personal 10.1.0.4Oracle Oracle10g Standard 10.1.0.4Oracle Oracle9i Standard 9.2.0.7
725
VMScore
CVE-2004-1774
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g prior to 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
Oracle Application Server 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Standard 10.1.0.2
490
VMScore
CVE-2006-0269
Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a re...
Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Standard 10.2.0.1
668
VMScore
CVE-2005-1495
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for malicious users to escape detection.
Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 10.1.0.3Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.1.3Oracle Application Server 10.1.0.3.1Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.3.1Oracle Oracle9i 9.2.0.1Oracle Oracle9i 9.2.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Oracle9i Release 2 9.2.1Oracle Oracle9i Release 2 9.2.2Oracle Application Server 10.1.0.2Oracle Application Server 10.1.0.3Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.2Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.0.2
890
VMScore
CVE-2006-0271
Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28. NOTE: details are unavailable from Oracle, but they have not publicl...
Oracle Database Server 8.1.7.4Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Standard 9.2.0.7Oracle Oracle10g Personal 10.1.0.4Oracle Oracle10g Standard 10.1.0.4Oracle Oracle8i Enterprise 8.1.7.4Oracle Oracle8i Standard 8.1.7.4
890
VMScore
CVE-2006-0262
Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB08.
Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Enterprise 9.0.1.5 FipsOracle Oracle10g Personal 10.1.0.4Oracle Oracle10g Standard 10.1.0.4Oracle Database Server 8.1.7.4Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle9i Standard 9.2.0.6Oracle Oracle8i Enterprise 8.1.7.4Oracle Oracle8i Standard 8.1.7.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook