Skip to content
OpenAdvisories

Archive

5 July 2007

Vulnerabilities first published on this day (UTC), newest first.

← June 2007 2007 / July /5 August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2006-7217

    Apache Derby SQL Injection

    Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

    org.apache.derby:derby Maven
  • Medium —
    CVE-2005-4849

    Apache Derby exposes user and password attributes

    Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensit…

    org.apache.derby:derby Maven