Description
Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04. NOTE: Oracle has not disputed a reliable researcher claim that this is a buffer overflow in the ADD_LOGFILE procedure for the SYS.DBMS_LOGMNR package that allows code execution.
Remediation
References
Related Vulnerabilities
Joomla! Core 3.x.x Security Bypass (3.7.0 - 3.9.15)
Moodle 7PK - Security Features Vulnerability (CVE-2015-5331)
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3567)
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
WordPress Plugin Digg Digg Cross-Site Request Forgery (5.3.4)