Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-1705

Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.
0
0
Attacker Value
Unknown

CVE-2005-3641

Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
0
0
Attacker Value
Unknown

CVE-2005-3204

Disclosure Date: October 14, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
0
0
Attacker Value
Unknown

CVE-2004-1707

Disclosure Date: July 30, 2004 (last updated February 22, 2025)
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.
0
0