Skip to content
OpenAdvisories

Archive

18 April 2007

Vulnerabilities first published on this day (UTC), newest first.

← March 2007 2007 / April /18 May 2007 →
  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047
All Critical High Medium Low Exploited only Public exploit

85 results · Feed

  • Unscored —
    CVE-2007-2126

    Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1)…

  • Unscored —
    CVE-2007-2123

    Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10…

  • Unscored —
    CVE-2007-2116

    Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has …

  • Unscored —
    CVE-2007-2132

    Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown …

  • Unscored —
    CVE-2007-2115

    Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2…

  • Unscored —
    CVE-2007-2110

    Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows sy…

  • Unscored —
    CVE-2007-2129

    Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote att…

  • Unscored —
    CVE-2007-2119

    Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (U…

  • Unscored —
    CVE-2007-2117

    Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and a…

  • Unscored —
    CVE-2007-2111

    SQL injection vulnerability in the SYS.DBMS_AQADM_SYS package in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 allows …

  • Unscored —
    CVE-2007-2134

    Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact …

  • Unscored —
    CVE-2007-2128

    Unspecified vulnerability in the Sales Online component for Oracle E-Business Suite 11.5.10 has unknown impact and remo…

  • Unscored —
    CVE-2007-2120

    The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers …

  • Unscored —
    CVE-2007-2133

    Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterpri…

  • Unscored —
    CVE-2007-2122

    Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack …

  • Unscored —
    CVE-2007-2113

    SQL injection vulnerability in the Upgrade/Downgrade component (DBMS_UPGRADE_INTERNAL) for Oracle Database 10.1.0.5 all…

  • Unscored —
    CVE-2007-2114

    Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authentica…

  • Unscored —
    CVE-2007-2109

    Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack ve…

  • Unscored —
    CVE-2007-2112

    Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact …

  • Unscored —
    CVE-2007-2131

    Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impa…

  • Unscored —
    CVE-2007-2108 EPSS 22%

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Wi…

  • Unscored —
    CVE-2007-2118

    Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact …

  • Unscored —
    CVE-2007-2121

    Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and at…

  • Unscored —
    CVE-2007-2130

    Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; App…

  • Unscored —
    CVE-2007-2125

    Unspecified vulnerability in Collaborative Workspace in Oracle Collaboration Suite 10.1.2 has unknown impact and attack…

  • Unscored —
    CVE-2007-2127

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors vi…

  • Unscored —
    CVE-2007-2124

    Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote…

  • Unscored —
    CVE-2006-7194 Public exploit

    PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glo…

  • Unscored —
    CVE-2007-2095

    PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2089 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo an…

  • Unscored —
    CVE-2007-2103

    Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-2094 Public exploit

    PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-2098 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to …

  • Unscored —
    CVE-2007-2085

    Cross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-2087 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register_globals is enabled and .htaccess is n…

  • Unscored —
    CVE-2007-2092 Public exploit

    Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attac…

  • Unscored —
    CVE-2007-2084

    PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2107

    SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attac…

  • Unscored —
    CVE-2007-2100

    FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2007-2106

    Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to …