VYPR

CVEs

383,395 total · page 7121 of 7,668

AllCriticalHighKEV
  • CVE-2007-5508Oct 17, 2007
    Oracle Corporation
    Text
    risk 0.03cvss —epss 0.05

    Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER,…

  • CVE-2007-5509Oct 17, 2007
    Oracle Corporation
    Spatial Component
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.

  • CVE-2007-5510Oct 17, 2007
    Oracle Corporation
    Workspace Manager
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in the Workspace Manager component in Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 have unknown impact and remote attack vectors, aka (1) DB08, (2) DB09, (3) DB10, (4) DB11, (5) DB12, (6) DB13, (7) DB14, (8) DB15,…

  • CVE-2007-5511Oct 17, 2007
    Oracle Corporation
    Workspace Manager
    risk 0.06cvss —epss 0.32

    SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but…

  • CVE-2007-5512Oct 17, 2007
    Oracle Corporation
    Database Vault
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21.

  • CVE-2007-5513Oct 17, 2007
    Oracle Corporation
    XML DB
    risk 0.00cvss —epss 0.03

    The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries,…

  • CVE-2007-5514Oct 17, 2007
    Oracle Corporation
    Database Vault
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to (1) Database Vault component (DB24) and (2) SQL Execution component (DB26).

  • CVE-2007-5515Oct 17, 2007
    Oracle Corporation
    Spatial
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.2, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB27.

  • CVE-2007-5516Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Process Mgmt & Notification component in Oracle Application Server 10.1.3.3 has unknown impact and remote attack vectors, aka AS01.

  • CVE-2007-5517Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2 and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS02.

  • CVE-2007-5518Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.

  • CVE-2007-5519Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04.

  • CVE-2007-5520Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unknown impact and remote attack vectors, aka AS05.

  • CVE-2007-5521Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS06.

  • CVE-2007-5522Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, aka AS07.

  • CVE-2007-5523Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS08.

  • CVE-2007-5524Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9.

  • CVE-2007-5525Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10.

  • CVE-2007-5526Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11.

  • CVE-2007-5527Oct 17, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component (APP01), (2) Contracts Integration (APP02), (3) Applications Manager (APP04), (4) Marketing component…

  • CVE-2007-5528Oct 17, 2007
    Oracle Corporation
    E Business Suite
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector Human Resources (APP03) and (2) Quoting component (APP06).

  • CVE-2007-5529Oct 17, 2007
    Oracle Corporation
    Oracle Self-Service Web Applications
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08.

  • CVE-2007-5530Oct 17, 2007
    Oracle Corporation
    Enterprise Manager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown impact and remote attack vectors, aka EM01.

  • CVE-2007-5531Oct 17, 2007
    Oracle Corporation
    Application Server
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.

  • CVE-2007-5532Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.

  • CVE-2007-5533Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE02.

  • CVE-2007-5534Oct 17, 2007
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has unknown impact and remote attack vectors, aka PSE_HCM01.

  • CVE-2007-5491Oct 17, 2007
    Sitebar
    Sitebar
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter.

  • CVE-2007-5492Oct 17, 2007
    Sitebar
    Sitebar
    risk 0.00cvss —epss 0.01

    Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter.

  • CVE-2007-5489Oct 17, 2007
    Artmedic Webdesign
    Artmedic CMS
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

  • CVE-2007-5490Oct 17, 2007
    Okulumunsitesi
    Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2007-4343Oct 16, 2007
    IrfanView
    Irfanview
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) file.

  • CVE-2007-5477Oct 16, 2007
    Valve Software
    Half Life Dedicated Server
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.

  • CVE-2007-5478Oct 16, 2007
    Nabh Information Systems
    Stringbeans Portal
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary web script or HTML via the project_name parameter.

  • CVE-2007-5479Oct 16, 2007
    Xcomputer
    Xcomputer
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter.

  • CVE-2007-5480Oct 16, 2007
    Innovaage
    Innovashop
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid parameter to tc/contents/home001.jsp.

  • CVE-2007-5481Oct 16, 2007
    Rhyolite
    DCC
    risk 0.00cvss —epss 0.01

    Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood."

  • CVE-2007-5482Oct 16, 2007
    Sun Corporation
    Storagetek 3510
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors.

  • CVE-2007-5483Oct 16, 2007
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors.

  • CVE-2007-5484Oct 16, 2007
    Wwwisis
    Wwwisis
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot dot) in the IsisScript parameter to iah.

  • CVE-2007-5485Oct 16, 2007
    Kwsphp
    Kwsphp
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.

  • CVE-2007-5486Oct 16, 2007
    Dotproject
    Dotproject
    risk 0.00cvss —epss 0.01

    dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are obtained from third party information.

  • CVE-2007-5487Oct 16, 2007
    Cowon America
    Jetaudio
    risk 0.03cvss —epss 0.06

    Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file.

  • CVE-2007-5468Oct 16, 2007
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.02

    Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and…

  • CVE-2007-5469Oct 16, 2007
    Openser
    Openser
    risk 0.00cvss —epss 0.02

    OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication…

  • CVE-2007-5470Oct 16, 2007
    Microsoft
    Expression Media
    risk 0.00cvss —epss 0.02

    Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.

  • CVE-2007-5471Oct 16, 2007
    Isc
    Bind
    risk 0.00cvss —epss 0.03

    libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. NOTE: this issue probably affects…

  • CVE-2007-5465Oct 15, 2007
    Mydoop
    Doop CMS
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter to an unspecified component.

  • CVE-2007-5466Oct 15, 2007
    Extremail
    Extremail
    risk 0.05cvss —epss 0.20

    Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the…

  • CVE-2007-5467Oct 15, 2007
    Extremail
    Extremail
    risk 0.04cvss —epss 0.14

    Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove…