DS
Product
Database Server
530
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 24Medium 47Low 32
Watch
Add Database Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-2608 | – | Jul 15 | Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2008-2607 | – | Jul 15 | Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated… Affected: 10.1.0.5; 10.2.0.4; 11.1.0.6 |
| CVE-2008-2605 | – | Jul 15 | Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than… Affected: 11.1.0.6 |
| CVE-2008-2604 | – | Jul 15 | Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than… Affected: 11.1.0.6 |
| CVE-2008-2602 | – | Jul 15 | Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the… Affected: 10.1.0.5; 10.2.0.4; 11.1.0.6 |
| CVE-2008-2600 | – | Jul 15 | Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2008-2592 | – | Jul 15 | Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and… Affected: 9.2.0.8; 10.1.0.5 |
| CVE-2008-2591 | – | Jul 15 | Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors Affected: 10.2.0.3; 11.1.0.6 |
| CVE-2008-2587 | – | Jul 15 | Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2008-1818 | – | Apr 16 | Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08 Affected: 11.1.0.6 |
| CVE-2008-1821 | – | Apr 16 | Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote attack vectors related to… Affected: 9.0.1.5; 10.1.0.5 |
| CVE-2008-1819 | – | Apr 16 | Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09 Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2008-1817 | – | Apr 16 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related… Affected: 9.0.1.5; 10.1.0.5; 10.2.0.3; 11.1.0.6 |
| CVE-2008-1816 | – | Apr 16 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2008-1813 | – | Apr 16 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated… Affected: 9.0.1.5; 10.1.0.5; 10.2.0.3 |
| CVE-2008-0339 | – | Jan 17 | Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01 Affected: 9.2.0.8dv; 10.1.0.5; 10.2.0.3 |
| CVE-2008-0349 | – | Jan 17 | Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0348 | – | Jan 17 | Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0347 | – | Jan 17 | Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0346 | – | Jan 17 | Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0345 | – | Jan 17 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08 Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0344 | – | Jan 17 | Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07 Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0343 | – | Jan 17 | Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06 Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2008-0342 | – | Jan 17 | Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB05 Affected: 9.2.0.8; 10.1.0.5; 10.2.0.3 |
| CVE-2008-0341 | – | Jan 17 | Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03 Affected: 9.0.1.5; 10.1.0.5 |
| CVE-2008-0340 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1)… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3; +1 more |
| CVE-2007-6260 | – | Dec 6 | The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener Affected: All versions, or not specified |
| CVE-2007-5897 | – | Nov 8 | Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service… Affected: 9.2.0.1; 9.2.0.2; 9.2.0.3; 9.2.0.4; 9.2.0.5; 9.2.0.6; +3 more |
| CVE-2007-4517 | – | Nov 8 | Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2)… Affected: release_2 |
| CVE-2007-5554 | – | Oct 18 | Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711 Affected: All versions, or not specified |
| CVE-2007-5506 | – | Oct 17 | The Core RDBMS component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (CPU consumption) via a… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.3 |
| CVE-2007-5531 | – | Oct 17 | Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote… Affected: 10.2.0.3 |
| CVE-2007-5530 | – | Oct 17 | Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown impact and remote attack vectors, aka… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2007-5520 | – | Oct 17 | Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0,… Affected: 9.2.0.8; 9.2.0.8dv |
| CVE-2007-5515 | – | Oct 17 | Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.2, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB27 Affected: 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; 10.2.0.3 |
| CVE-2007-5514 | – | Oct 17 | Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to (1) Database Vault component (DB24) and (2) SQL Execution… Affected: 10.2.0.3 |
| CVE-2007-5513 | – | Oct 17 | The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to… Affected: 9.2.0.8; 9.2.0.8dv; 10.1.0.5 |
| CVE-2007-5512 | – | Oct 17 | Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21 Affected: 9.2.0.8dv; 10.2.0.3 |
| CVE-2007-5511 | – | Oct 17 | SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands… Affected: All versions, or not specified |
| CVE-2007-5510 | – | Oct 17 | Multiple unspecified vulnerabilities in the Workspace Manager component in Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 have unknown impact and remote… Affected: All versions, or not specified |
| CVE-2007-5509 | – | Oct 17 | Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06 Affected: 9.2.0.8; 9.2.0.8dv |
| CVE-2007-5508 | – | Oct 17 | Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2007-5504 | – | Oct 17 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing… Affected: 9.0.1.5; 10.1.0.5 |
| CVE-2007-5507 | – | Oct 17 | The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.3 |
| CVE-2007-5505 | – | Oct 17 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.3 |
| CVE-2007-3857 | – | Jul 18 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1)… Affected: 10.1.0.5 |
| CVE-2007-3859 | – | Jul 18 | Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; and… Affected: 9.2.0.8; 9.2.0.8dv |
| CVE-2007-3858 | – | Jul 18 | Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 allow remote authenticated users to have an unknown impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11)… Affected: 10.2.0.3 |
| CVE-2007-3856 | – | Jul 18 | Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7,… Affected: 9.2.0.7; 9.2.0.8; 9.2.0.8dv; 10.2.0.2; 10.2.0.3 |
| CVE-2007-3855 | – | Jul 18 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1)… Affected: 9.0.1.5; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.3 |
The 500 most important CVEs for this product (exploited first, then by severity)
