CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2009-0985
https://notcve.org/view.php?id=CVE-2009-0985
Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability. Vulnerabilidad no especificada en el componente Core RDBMS de Oracle Database v10.1.0.5, v10.2.0.4 y v11.1.0.6; permite a usuarios autenticados en remotos con el rol IMP_FULL_DATABASE comprometer la confidencialidad, integridad y disponibilidad. • http://secunia.com/advisories/34693 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html http://www.securityfocus.com/bid/34461 http://www.securitytracker.com/id?1022052 http://www.us-cert.gov/cas/techalerts/TA09-105A.html •
CVSS: 5.5EPSS: 8%CPEs: 4EXPL: 0CVE-2009-0977
https://notcve.org/view.php?id=CVE-2009-0977
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the GRANT_TYPE_ACCESS procedure in the DBMS_AQADM_SYS package. Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5 y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridadad, en relación con DBMS_AQIN. • http://secunia.com/advisories/34693 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html http://www.securityfocus.com/archive/1/502727/100/0/threaded http://www.securityfocus.com/bid/34461 http://www.securitytracker.com/id?1022052 http://www.us-cert.gov/cas/techalerts/TA09-105A.html •
CVSS: 5.5EPSS: 8%CPEs: 3EXPL: 0CVE-2009-0992
https://notcve.org/view.php?id=CVE-2009-0992
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure. Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar a la confidencialidad e integridad, en relación a DBMS_AQIN. • http://secunia.com/advisories/34693 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html http://www.securityfocus.com/archive/1/502723/100/0/threaded http://www.securityfocus.com/bid/34461 http://www.securitytracker.com/id?1022052 http://www.us-cert.gov/cas/techalerts/TA09-105A.html •
CVSS: 5.0EPSS: 14%CPEs: 5EXPL: 1CVE-2009-0991 – Oracle RDBms 10.2.0.3/11.1.0.6 - TNS Listener (PoC)
https://notcve.org/view.php?id=CVE-2009-0991
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970. Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1970. • https://www.exploit-db.com/exploits/8507 http://osvdb.org/53737 http://secunia.com/advisories/34693 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html http://www.securityfocus.com/bid/34461 http://www.securitytracker.com/id?1022052 http://www.us-cert.gov/cas/techalerts/TA09-105A.html https://exchange.xforce.ibmcloud.com/vulnerabilities/50026 •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2008-5436
https://notcve.org/view.php?id=CVE-2008-5436
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors. Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5 y 10.2.0.4, permite a usuarios autenticados comprometer la integridad y disponibilidad a través de vectores no especificados. • http://osvdb.org/51346 http://secunia.com/advisories/33525 http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html http://www.securityfocus.com/bid/33177 http://www.securitytracker.com/id?1021561 http://www.vupen.com/english/advisories/2009/0115 •