CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2010-0901
https://notcve.org/view.php?id=CVE-2010-0901
13 Jul 2010 — Unspecified vulnerability in the Export component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Select Any Dictionary. Vulnerabilidad no especificada en el componente Export en Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7 y 11.2.0.1 permite a atacantes remotos autenticados comprometer la confidencialidad a través de vectores desconocidos relacionado... • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2010-0903
https://notcve.org/view.php?id=CVE-2010-0903
13 Jul 2010 — Unspecified vulnerability in the Net Foundation Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1, when running on Windows, allows remote attackers to affect availability via unknown vectors. Vulnerabilidad no especificada en el componente Foundation Layer en Oracle Database Server v9.2.0.8, v10.1.0.5, v10.2.0.4, v11.1.0.7, y v11.2.0.1, cuando se ejecutan en Windows, permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 9.9EPSS: 0%CPEs: 6EXPL: 0CVE-2010-0902
https://notcve.org/view.php?id=CVE-2010-0902
13 Jul 2010 — Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database Server v9.2.0.8, vv9.2.0.8DV, 10.1.0.5, v10.2.0.4, v11.1.0.7, y v11.2.0.1, permite a usuarios autenticados remotamente comprometer la confidencialidad, integridad y disponibilidad... • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 8.6EPSS: 0%CPEs: 6EXPL: 0CVE-2010-0911
https://notcve.org/view.php?id=CVE-2010-0911
13 Jul 2010 — Unspecified vulnerability in the Listener component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect availability via unknown vectors. Vulnerabilidad no especificada en el componente Listener de Oracle Database Server v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4, v11.1.0.7, y v11.2.0.1, permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 9.9EPSS: 63%CPEs: 2EXPL: 2CVE-2010-0866 – Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
https://notcve.org/view.php?id=CVE-2010-0866
13 Apr 2010 — Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad sin especificar en el componente JavaVM en Oracle Database v11.1.0.7 y v11.2.0.1 permite a usuarios remotos autenticados afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. • https://packetstorm.news/files/id/180731 •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2010-0867
https://notcve.org/view.php?id=CVE-2010-0867
13 Apr 2010 — Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to affect integrity via unknown vectors. Vulnerabilidad no especificada en el componente JavaVM en Oracle Database 10.2.0.4, 11.1.0.7 y 11.2.0.1.0 permite a atacantes remotos autenticados comprometer la integridad mediante vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html •
CVSS: 10.0EPSS: 28%CPEs: 4EXPL: 1CVE-2007-3336 – CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC)
https://notcve.org/view.php?id=CVE-2007-3336
22 Jun 2007 — Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input. Múltiples vulnerabilidades "pointer overwrite" en Ingres database server 2006 versiones 9.0.4, r3, 2.6 y 2.5, t... • https://www.exploit-db.com/exploits/14646 •
CVSS: 10.0EPSS: 20%CPEs: 4EXPL: 0CVE-2007-3338
https://notcve.org/view.php?id=CVE-2007-3338
22 Jun 2007 — Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions. Múltiples desbordamientos de búfer en la región stack de la memoria en Ingres database server 2006 versiones 9.0.4, r3, 2.6 y 2.5, tal como se usa en varios productos de CA (Computer Associates), permiten a los atacantes remotos ejecutar código arbitrario... • http://osvdb.org/37483 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2007-3337
https://notcve.org/view.php?id=CVE-2007-3337
22 Jun 2007 — wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file. El inicio (wakeup) en la base de datos Ingres server 2006 9.0.4, r3, 2.6 y 2.5, tal y como se usa en los productos CA (Computer Associates), permite a usuarios locales truncar ficheros de su elección mediante un ataque symlink (de enlaces simbólicos) en el fichero alarmwkp.def. • http://osvdb.org/37485 •