Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Oracle Application ServerISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an…

Risk 44
Severity
7.8
AV:N/AC:L/Au:N/C:C/I:N/A:N

ISQLPlus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

First published (updated )
CVE-2004-1368

Oracle Oracle10gThe PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO…

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

First published (updated )
CVE-2004-1362

Oracle Application ServerPath Traversal

Risk 72
Severity
8.5
Path Traversal
AV:N/AC:M/Au:S/C:C/I:C/A:C

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLEHOME\bin directory.

First published (updated )
CVE-2004-1364

Oracle Oracle10gSQL Injection

Risk 52
Severity
7.5
SQL Injection
AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMSEXPORTEXTENSION, (2) WKACL.GETACL, (3) WKACL.STOREACL, (4) WKADM.COMPLETEACLSNAPSHOT, (5) WKACL.DELETEACLSWITHSTATEMENT, or (6) DRILOAD.VALIDATESTMT.

First published (updated )
CVE-2004-1370

Oracle Oracle10gUnspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, …

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.

First published (updated )
CVE-2006-0552

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203