CVSS: 9.0EPSS: 92%CPEs: 4EXPL: 0CVE-2006-0272
https://notcve.org/view.php?id=CVE-2006-0272
Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS. • http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html http://secunia.com/advisories/18493 http://secunia.com/advisories/18608 http://securitytracker.com/id?1015499 http://www.argeniss.com/research/ARGENISS-ADV-010601.txt http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf http://www.kb.cert.org/vuls/id/545804 http://www.kb.cert.org/vuls/id/891644 http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html http://www.red-database-security& •
CVSS: 7.5EPSS: 86%CPEs: 27EXPL: 9CVE-2005-4832 – Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection
https://notcve.org/view.php?id=CVE-2005-4832
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197. • https://www.exploit-db.com/exploits/25452 https://www.exploit-db.com/exploits/25453 https://www.exploit-db.com/exploits/3378 https://www.exploit-db.com/exploits/3364 http://www.appsecinc.com/resources/alerts/oracle/2005-02.html http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf http://www.securityfocus.com/archive/1/396133 http:/&# •
CVSS: 7.5EPSS: 0%CPEs: 101EXPL: 0CVE-2005-3641
https://notcve.org/view.php?id=CVE-2005-3641
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username. • http://www.ngssoftware.com/papers/database-on-xp.pdf http://www.securityfocus.com/bid/15450 •