Oracle HTTP Server (January 2006 CPU)

According to its banner, the version of Oracle HTTP Server installed on the remote host is potentially affected by multiple vulnerabilities : - An unspecified information disclosure issue exists. CVE-2006-0286 - An unspecified error can allow denial of service attacks. CVE-2006-0287 C Tenable...

Oracle Database Data Pump Metadata API SQL injection vulnerability

Overview Oracle Database Data Pump Metadata API is vulnerable to SQL injection, which could allow a remote attacker to execute arbitrary SQL commands on a vulnerable Oracle installation. Description The Oracle Database Data Pump Metadata API fails to properly filter user-supplied input. This may...