release.2

DATE	CVE	VULNERABILITY TITLE	RISK
2007-11-08	CVE-2007-4517	Buffer Errors vulnerability in Oracle Database Server Release2 Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument. network oracle CWE-119	6.0
2006-05-22	CVE-2006-2505	SQL Injection vulnerability in Oracle Database Server Release2 Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package. local low complexity oracle	3.6