Database Server
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:database_server:10.2.1:r2:*:*:*:*:*:*
part: a version: 10.2.1 update: r2
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Database Server (c4b75d6a-b6aa-58b6-9301-ee10807a2834) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-7067 |
vulnerable | 2026-06-08 04:49:30.300731 |
Details available
Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments. NOTE: this issue was originally disputed by a third party, but the dispute was retracted. NOTE: this issue was called an "integer overflow" in the original source, but this might be incorrect.
Published: 2007-02-27T18:00:00.000Z
Updated: 2024-08-07T20:50:06.053Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0297 |
vulnerable | 2026-06-08 04:48:12.203827 |
Details available
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.
Published: 2005-02-10T05:00:00.000Z
Updated: 2024-08-07T21:05:25.578Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1339 |
vulnerable | 2026-06-08 04:47:53.679616 |
Details available
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1338 |
vulnerable | 2026-06-08 04:47:53.671332 |
Details available
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.320Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.