3719 matches found
Oracle Application Express (Apex) CVE-2010-0892
An unspecified vulnerability in version 3.2 of the Application Express component of Oracle Database Server allows remote attackers to affect integrity via unknown vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/...
Oracle Application Express (Apex) CVE-2008-4005
An unspecified vulnerability in the Oracle Application Express component of Oracle Database version 11.1.0.6 allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...
Oracle Application Express (Apex) Unspecified Issues (pre 3.0.1)
There are unspecified vulnerabilities in versions prior to version 3.0.1 of the Oracle Application Express component of the Oracle Database. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detection script for multiple...
Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)
There are unspecified vulnerabilities in versions prior to version 2.2.1 of the Oracle Application Express component of the Oracle Database. The updated version of Apex contains '35 new security fixes for Oracle Application Express, 25 of which may be remotely exploitable without authentication'...
CVE-2013-0366
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0361...
Design/Logic Flaw
Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2012-3220
Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2013-0363
Technical details about CVE-2013-0363 are not publicly provided in the supplied documents. The available records describe an unspecified vulnerability in Oracle Mobile/Lite Server components without concrete affected versions, vectors, or mitigations. Monitor for new disclosures.
CVE-2012-3220
CVE-2012-3220 is a published vulnerability in Oracle Spatial/GeoRaster within Oracle Database Server (versions 10.2.0.3–11.2.0.3) that exploits a stack-based overflow in the GeoRaster API. The issue allows a remote attacker who can connect to spatially enabled Oracle databases to execute arbitrar...
CVE-2013-0362
Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0363 and CVE-2013-0364...
Oracle Patches Java Zero Day Vulnerability
Oracle delivered an unusual emergency patch to Java's critical Zero Day vulnerability on Sunday to fix a malicious bug that allowed hackers access to users web browsers. Exploits for the previously undisclosed flaw were being hosted in a number of exploit kits and attacks have already been seen i...
Oracle Patches Java Zero Day Vulnerability
Oracle delivered an unusual emergency patch to Java's critical Zero Day vulnerability on Sunday to fix a malicious bug that allowed hackers access to users web browsers. Exploits for the previously undisclosed flaw were being hosted in a number of exploit kits and attacks have already been seen i...
Oracle Database Client System Analyzer Arbitrary File Upload
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Oracle Containers for J2EE/ include...
Oracle Database Client System Analyzer Arbitrary File Upload
This Metasploit module exploits an arbitrary file upload vulnerability on the Client Analyzer component as included in Oracle Database 11g, which allows remote attackers to upload and execute arbitrary code. This Metasploit module has been tested successfully on Oracle Database 11g 11.2.0.1.0 on...
Oracle Database Client System Analyzer - Arbitrary File Upload (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Oracle Containers for J2EE/ include...
mysql: unspecified DoS vulnerability related to InnoDB (CPU Oct 2012)
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB...
The latest Oracle Database authentication Protocol security bypass vulnerability-vulnerability warning-the black bar safety net
The Oracle Database was found likely to cause a remote security bypass vulnerability, and impact to its own authentication Protocol. An attacker can exploit this vulnerability to bypass the database authentication to access the database from unauthorized access. Affected versions: Oracle Database...
Oracle database to bypass login authentication-vulnerability warning-the black bar safety net
And a while back that phpmyadmin to bypass the verification is somewhat similar. An attacker can exploit this vulnerability to bypass authentication process and gain unauthorized access to the database. 1. --coding:utf8 -- 2. 3. import hashlib 4. from Crypto. Cipher import AES 5. 6. def...
Oracle Database Multiple Vulnerabilities (October 2012 CPU)
The remote Oracle database server is missing the October 2012 Critical Patch Update CPU and is, therefore, potentially affected by security issues in the Core RDBMS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...