DS
Product
Database Server
530
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 24Medium 47Low 32
Watch
Add Database Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-3854 | – | Jul 18 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the… Affected: 9.0.1.5; 9.2.0.7; 9.2.0.8; 9.2.0.8dv; 10.1.0.5; 10.2.0.2; +1 more |
| CVE-2007-3853 | – | Jul 18 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM… Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2007-2108 | – | Apr 18 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka… Affected: 9.0.1.5; 9.2.0.8; 10.1.0.5; 10.2.0.2 |
| CVE-2007-2130 | – | Apr 18 | Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite… Affected: 9.2.0.1; 10.1.0.2; 10.2.0.1 |
| CVE-2007-2119 | – | Apr 18 | Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5,… Affected: 9.2.0.8; 10.1.0.5; 10.2.0.2 |
| CVE-2007-2118 | – | Apr 18 | Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aka DB13 Affected: 9.0.1.5; 9.2.0.7 |
| CVE-2007-2117 | – | Apr 18 | Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12 Affected: 9.2.0.5 |
| CVE-2007-2116 | – | Apr 18 | Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10 Affected: 9.0.1.5; 9.2.0.7; 10.2.0.1 |
| CVE-2007-2115 | – | Apr 18 | Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09 Affected: 9.2.0.7; 10.1.0.5; 10.2.0.2 |
| CVE-2007-2114 | – | Apr 18 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to (1) Change Data Capture… Affected: 10.1.0.5; 10.2.0.2 |
| CVE-2007-2113 | – | Apr 18 | SQL injection vulnerability in the Upgrade/Downgrade component (DBMS_UPGRADE_INTERNAL) for Oracle Database 10.1.0.5 allows remote authenticated users to execute arbitrary SQL… Affected: 10.1.0.5 |
| CVE-2007-2112 | – | Apr 18 | Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05 Affected: 10.1.0.5; 10.2.0.3 |
| CVE-2007-2111 | – | Apr 18 | SQL injection vulnerability in the SYS.DBMS_AQADM_SYS package in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 allows remote authenticated users to inject arbitrary SQL commands… Affected: 9.0.1.5; 9.2.0.7; 10.1.0.5 |
| CVE-2007-2110 | – | Apr 18 | Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03 Affected: 9.0.1.5; 9.2.0.7; 10.1.0.4 |
| CVE-2007-2109 | – | Apr 18 | Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) Rules Manager and Expression Filter… Affected: 10.2.0.3 |
| CVE-2007-1442 | – | Mar 14 | Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users… Affected: 10.2.1; 10.2.1; 10.2.1; 10.2.2; 10.2.2; 10.2.2; +3 more |
| CVE-2006-7141 | – | Mar 7 | Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote… Affected: All versions, or not specified |
| CVE-2006-7067 | – | Mar 2 | Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with… Affected: 10.2.1 |
| CVE-2007-0276 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to (1) Advanced Security Option and oklist or okdstry… Affected: 8.1.7.4; 9.0.1.5 |
| CVE-2007-0278 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) NLS Runtime and lmsgen… Affected: 8.1.7.4; 9.0.1.5; 9.2.0.7; 10.1.0.5 |
| CVE-2007-0277 | – | Jan 17 | Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or impdp, aka DB11 Affected: 10.1.0.4 |
| CVE-2007-0275 | – | Jan 17 | Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component, as used in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3;… Affected: 9.2.0.8; 10.1.0.5; 10.2.0.3 |
| CVE-2007-0274 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbms_logrep_util (DB08), and (2)… Affected: 9.2.0.7; 10.1.0.5 |
| CVE-2007-0273 | – | Jan 17 | Unspecified vulnerability in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to XMLDB, aka DB06 Affected: 9.0.1.5; 9.2.0.8; 10.1.0.5; 10.2.0.3 |
| CVE-2007-0272 | – | Jan 17 | Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute… Affected: 8.1.7.4; 9.0.1.5; 9.2.0.7; 10.1.0.4 |
| CVE-2007-0271 | – | Jan 17 | Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04 Affected: 9.0.1.5; 9.2.0.7 |
| CVE-2007-0270 | – | Jan 17 | Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via the… Affected: 9.2.0.7; 10.1.0.4 |
| CVE-2007-0269 | – | Jan 17 | Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture and sys.dbms_cdc_subscribe… Affected: 9.2.0.8; 10.1.0.5; 10.2.0.3 |
| CVE-2007-0268 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) the Advanced Queuing component and… Affected: 9.0.1.5; 9.2.0.7; 10.1.0.5 |
| CVE-2006-5332 | – | Oct 18 | Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln#… Affected: 9.2.0.6; 10.1.0.4 |
| CVE-2006-5345 | – | Oct 18 | Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to… Affected: 9.0.1.5; 9.2.0.7; 10.1.0.4 |
| CVE-2006-5344 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack… Affected: 8.1.7.4; 9.0.1.5; 9.2.0.7; 10.1.0.4 |
| CVE-2006-5343 | – | Oct 18 | Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vectors related to sys.dbms_scheduler, aka… Affected: 10.1.0.3 |
| CVE-2006-5342 | – | Oct 18 | Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to… Affected: 9.0.1.5; 9.2.0.6; 10.1.0.3 |
| CVE-2006-5341 | – | Oct 18 | Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors, aka (1)… Affected: 9.2.0.7; 10.1.0.5; 10.2.0.2 |
| CVE-2006-5340 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated… Affected: 8.1.7.4; 9.0.1.5; 9.2.0.7; 10.1.0.5; 10.2.0.2 |
| CVE-2006-5339 | – | Oct 18 | Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related… Affected: 8.1.7.4; 9.0.1.5; 9.2.0.7; 10.1.0.4 |
| CVE-2006-5338 | – | Oct 18 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln#… Affected: 10.1.0.5; 10.2.0.0 |
| CVE-2006-5337 | – | Oct 18 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 has unknown impact and remote authenticated attack vectors, aka… Affected: 9.0.1.5; 9.2.0.8; 10.1.0.5; 10.2.0.2 |
| CVE-2006-5336 | – | Oct 18 | Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack… Affected: 9.2.0.7; 10.1.0.5; 10.2.0.2 |
| CVE-2006-5335 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) Vuln# DB04 and… Affected: 10.1.0.5; 10.2.0.2 |
| CVE-2006-5334 | – | Oct 18 | Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to… Affected: 9.0.1.5; 9.2.0.7; 10.1.0.5 |
| CVE-2006-5333 | – | Oct 18 | Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session"… Affected: 10.2.0.2 |
| CVE-2006-3698 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Capture (CDC) component and (2)… Affected: 10.1.0.5 |
| CVE-2006-3705 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade &… Affected: 10.1.0.5 |
| CVE-2006-3700 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and… Affected: 9.2.0.6; 10.1.0.4 |
| CVE-2006-3699 | – | Jul 21 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB02 Affected: 9.0.1.5; 9.2.0.6 |
| CVE-2006-3704 | – | Jul 21 | Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4 Affected: 10.1.0.4 |
| CVE-2006-3703 | – | Jul 21 | Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07 Affected: 9.0.1.5; 9.2.0.6; 10.1.0.4 |
| CVE-2006-3702 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in… Affected: 8.1.7.4; 9.2.0.7; 10.1.0.5; 10.2.0.2 |
The 500 most important CVEs for this product (exploited first, then by severity)