Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration S…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and att…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors rel…
-
Unscored —
Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle…
-
Unscored —
Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenti…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component,…
-
Unscored —
Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors relat…
-
Unscored —
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and Collaboration Suite 9.0.4.2 has unknown impact and a…
-
Unscored —
Unspecified vulnerability in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vec…
-
Unscored —
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2…
-
Unscored —
Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Databa…
-
Unscored —
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 ha…
-
Unscored —
Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a de…
-
Unscored —
Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unk…
-
Unscored —CVE-2007-0297 Public exploit
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown …
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors relat…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack v…
-
Unscored —CVE-2007-0222 EPSS 13%
Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows rem…
-
Unscored —
GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in …
-
Unscored —CVE-2006-6938 Public exploit
Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote…
-
Unscored —CVE-2006-6936 Public exploit
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML o…
-
Unscored —CVE-2006-6937 Public exploit
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary S…
-
Unscored —CVE-2007-0267 Public exploit
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service …
-
Unscored —
ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified de…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web …
-
Unscored —
SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-6932 Public exploit
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrar…
-
Unscored —
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain ru…
-
Unscored —
Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —
Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat …
-
Unscored —
Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnera…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-0261 Public exploit
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers t…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbit…
-
Unscored —
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute…
-
Unscored —
Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arb…
-
Unscored —CVE-2007-0264 Public exploit
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and p…
-
High 7.8CVE-2007-0257 Public exploit
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…
-
Unscored —
SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attac…