Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Oracle10g
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-3641 1 Oracle 5 Database Server, Database Server Lite, Oracle10g and 2 more 2025-04-03 7.5 HIGH N/A
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
CVE-2006-1705 1 Oracle 2 Oracle10g, Oracle9i 2025-04-03 2.1 LOW N/A
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.
CVE-2006-0269 1 Oracle 1 Oracle10g 2025-04-03 5.5 MEDIUM N/A
Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the SET_DIRECTORY_ROOT function in the DBMS_CDC_PUBLISH package.
CVE-2005-1496 1 Oracle 2 Application Server, Oracle10g 2025-04-03 4.6 MEDIUM N/A
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.