Vulnerabilities > Oracle > Database Server > 10.1.0.4

DATE CVE VULNERABILITY TITLE RISK
2006-10-18 CVE-2006-5332 Multiple vulnerability in Oracle Database Server 10.1.0.4/9.2.0.6
Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln# DB01.
network
low complexity
oracle
critical
9.0
2006-07-21 CVE-2006-3704 Multiple vulnerability in Oracle Database Server 10.1.0.4
Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.
network
low complexity
oracle
critical
10.0
2006-07-21 CVE-2006-3703 Multiple vulnerability in Oracle Database Server 10.1.0.4/9.0.1.5/9.2.0.6
Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.
network
low complexity
oracle
critical
9.0
2006-07-21 CVE-2006-3700 Multiple vulnerability in Oracle Database Server 10.1.0.4/9.2.0.6
Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and Versioning (DAV) and (2) DB23 for XMLDB.
network
low complexity
oracle
critical
10.0
2006-04-20 CVE-2006-1876 Multiple vulnerability in Oracle Database Server 10.1.0.4/9.2.0.7
Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12.
network
low complexity
oracle
critical
9.0
2006-04-20 CVE-2006-1873 Multiple vulnerability in Oracle Database Server 10.1.0.4/10.2.0.1/9.2.0.7
Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB08.
network
low complexity
oracle
critical
9.0
2006-04-20 CVE-2006-1868 Buffer Errors vulnerability in Oracle Database Server 10.1.0.4
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
network
low complexity
oracle CWE-119
7.5
2006-02-04 CVE-2006-0551 SQL-Injection vulnerability in Oracle10g Standard Edition
SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors.
network
low complexity
oracle
7.5
2006-02-04 CVE-2006-0547 SQL-Injection vulnerability in Oracle10g Personal Edition
Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol.
network
low complexity
oracle
7.5
2006-01-18 CVE-2006-0268 Multiple vulnerability in Oracle Database Server 10.1.0.4/9.0.1.5/9.2.0.6
Unspecified vulnerability in the Security component of Oracle Database server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB21.
network
low complexity
oracle
critical
9.0