Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:database_server:9.2.0.8dv:r2:*:*:*:*:*:*

part: a version: 9.2.0.8dv update: r2

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductDatabase Server (c4b75d6a-b6aa-58b6-9301-ee10807a2834)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4822 not_vulnerable 2026-06-08 04:49:57.278327 Details available
Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as demonstrated by accessing (1) ap.html and (2) filter_ip.html.
Published: 2007-09-11T19:00:00.000Z
Updated: 2024-08-07T15:08:33.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3854 vulnerable 2026-06-08 04:49:55.190138 Details available
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.
Published: 2007-07-18T19:00:00.000Z
Updated: 2024-08-07T14:28:52.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.