CVSS: 9.8EPSS: 4%CPEs: 60EXPL: 0CVE-2006-0552
https://notcve.org/view.php?id=CVE-2006-0552
04 Feb 2006 — Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11. • http://secunia.com/advisories/18493 •
CVSS: 8.8EPSS: 9%CPEs: 7EXPL: 0CVE-2006-0547
https://notcve.org/view.php?id=CVE-2006-0547
04 Feb 2006 — Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been ... • http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html •
CVSS: 10.0EPSS: 1%CPEs: 4EXPL: 0CVE-2006-0256
https://notcve.org/view.php?id=CVE-2006-0256
18 Jan 2006 — Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB01. • http://secunia.com/advisories/18493 •
CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 1CVE-2006-0257
https://notcve.org/view.php?id=CVE-2006-0257
18 Jan 2006 — Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package. • http://secunia.com/advisories/18493 •
CVSS: 10.0EPSS: 1%CPEs: 2EXPL: 1CVE-2006-0260
https://notcve.org/view.php?id=CVE-2006-0260
18 Jan 2006 — Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB05 in the (a) Data Pump component; (2) DB15 in the (b) Oracle Text component; (3) DB22 in the (c) Streams Apply component; (4) DB23 and (5) DB24 in the (d) Streams Capture component; and (6) DB26 in the (e) Streams Subcomponent. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent resear... • http://secunia.com/advisories/18493 •
CVSS: 10.0EPSS: 3%CPEs: 5EXPL: 0CVE-2006-0261
https://notcve.org/view.php?id=CVE-2006-0261
18 Jan 2006 — Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053. • http://secunia.com/advisories/18493 •
CVSS: 10.0EPSS: 11%CPEs: 6EXPL: 0CVE-2006-0263
https://notcve.org/view.php?id=CVE-2006-0263
18 Jan 2006 — Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB09 in the (a) Net Listener component; and (2) DB12 and (3) DB13 in the Network Communications (RPC) component. • http://secunia.com/advisories/18493 •
CVSS: 10.0EPSS: 2%CPEs: 5EXPL: 1CVE-2006-0265
https://notcve.org/view.php?id=CVE-2006-0265
18 Jan 2006 — Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXS... • http://secunia.com/advisories/18493 •
CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0CVE-2006-0266
https://notcve.org/view.php?id=CVE-2006-0266
18 Jan 2006 — Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB19. • http://secunia.com/advisories/18493 •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2006-0267
https://notcve.org/view.php?id=CVE-2006-0267
18 Jan 2006 — Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20. • http://secunia.com/advisories/18493 •