OR
Product
Oracle10g
23
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Oracle10g to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-3856 | – | Jul 18 | Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7,… Affected: standard_10.1.0.5 |
| CVE-2006-6703 | – | Dec 23 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in… Affected: All versions, or not specified |
| CVE-2006-1705 | – | Apr 11 | Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the… Affected: enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; enterprise_10.1.0.4; enterprise_10.2.3; personal_10.1.0.2; +12 more |
| CVE-2006-0586 | – | Feb 8 | Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1)… Affected: enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; enterprise_10.1.0.4; personal_10.1.0.2; personal_10.1.0.3; +8 more |
| CVE-2006-0552 | – | Feb 4 | Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as… Affected: enterprise_10.1.0.3; enterprise_10.1.0.4; personal_10.1.0.3; personal_10.1.0.4; standard_10.1.0.3; standard_10.1.0.4; +3 more |
| CVE-2006-0272 | – | Jan 18 | Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln#… Affected: enterprise_10.1.0.4; personal_10.1.0.4; standard_10.1.0.4 |
| CVE-2006-0271 | – | Jan 18 | Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as… Affected: enterprise_10.1.0.4; personal_10.1.0.4; standard_10.1.0.4 |
| CVE-2006-0269 | – | Jan 18 | Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln#… Affected: standard_10.1.0.5; standard_10.2.0.1 |
| CVE-2006-0262 | – | Jan 18 | Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack… Affected: enterprise_10.1.0.4; personal_10.1.0.4; standard_10.1.0.4 |
| CVE-2005-4832 | – | Dec 31 | SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the… Affected: enterprise_9.0.4.0; enterprise_9.0.4_.0; enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; enterprise_10.1.0.4; +21 more |
| CVE-2005-3641 | – | Nov 16 | Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username Affected: enterprise_9.0.4.0; enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; enterprise_10.1.0.4; personal_9.0.4.0; +10 more |
| CVE-2005-1496 | – | May 11 | The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user Affected: enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; personal_10.1.0.2; personal_10.1.0.3; personal_10.1.0.3.1; +3 more |
| CVE-2005-1495 | – | May 11 | Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape… Affected: enterprise_10.1.0.2; enterprise_10.1.0.3; enterprise_10.1.0.3.1; personal_10.1.0.2; personal_10.1.0.3; personal_10.1.0.3.1; +3 more |
| CVE-2004-1774 | – | Aug 31 | Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via… Affected: enterprise_10.1.0.2; personal_10.1.0.2; standard_10.1.0.2 |
| CVE-2004-1371 | – | Aug 4 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1370 | – | Aug 4 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1369 | – | Aug 4 | The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used… Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1368 | – | Aug 4 | ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1367 | – | Aug 4 | Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1366 | – | Aug 4 | Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA… Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1365 | – | Aug 4 | Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1362 | – | Aug 4 | The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which… Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
| CVE-2004-1364 | – | Aug 4 | Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory Affected: enterprise_9.0.4_.0; enterprise_10.1.0.2; personal_9.0.4_.0; personal_10.1_.0.2; standard_9.0.4_.0; standard_10.1_.0.2 |
Showing 23