CVSS: 5.5EPSS: 8%CPEs: 3EXPL: 0CVE-2009-0992
https://notcve.org/view.php?id=CVE-2009-0992
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure. Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar a la confidencialidad e integridad, en relación a DBMS_AQIN. • http://secunia.com/advisories/34693 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html http://www.securityfocus.com/archive/1/502723/100/0/threaded http://www.securityfocus.com/bid/34461 http://www.securitytracker.com/id?1022052 http://www.us-cert.gov/cas/techalerts/TA09-105A.html •
CVSS: 1.7EPSS: 0%CPEs: 7EXPL: 0CVE-2008-3973
https://notcve.org/view.php?id=CVE-2008-3973
Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors. Vulnerabilidad sin especificar en el componente SQL*Plus Windows GUI en Oracle Database, permite a usuarios locales comprometer la confidencialidad a través de vectores desconocidos. • http://osvdb.org/51351 http://secunia.com/advisories/33525 http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html http://www.securityfocus.com/bid/33177 http://www.securitytracker.com/id?1021561 http://www.vupen.com/english/advisories/2009/0115 •
CVSS: 4.0EPSS: 1%CPEs: 4EXPL: 0CVE-2008-1820
https://notcve.org/view.php?id=CVE-2008-1820
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure. Una vulnerabilidad no especificada en el componente Data Pump en Oracle Database versiones 9.2.0.8, 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos relacionados con KUPF$FILE_INT, también se conoce como DB11. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. • http://secunia.com/advisories/29829 http://secunia.com/advisories/29874 http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html http://www.securityfocus.com/archive/1/491024/100/0/threaded http://www.securityfocus.com/archive/1/491524/30/390/threaded http://www.securitytracker.com/id?1019855 http://www.vupen.com/english/advisories/2008/1233/references http://www.vupen.com/english/advisories/2008/1267/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 ht •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2008-1815
https://notcve.org/view.php?id=CVE-2008-1815
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB02 is for SQL injection in LOCK_CHANGE_SET. Una vulnerabilidad no especificada en el componente Change Data Capture de Oracle Database versiones 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos autenticados relacionados con DBMS_CDC_UTILITY , también se conoce como DB02. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. • http://secunia.com/advisories/29829 http://secunia.com/advisories/29874 http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html http://www.securityfocus.com/archive/1/491024/100/0/threaded http://www.securityfocus.com/archive/1/491522/30/390/threaded http://www.securitytracker.com/id?1019855 http://www.vupen.com/english/advisories/2008/1233/references http://www.vupen.com/english/advisories/2008/1267/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 ht •