CVE-2007-5512

CVE-2007-5512 is described as an unspecified vulnerability in the Oracle Database Vault component of Oracle Database 9.2.0.8DV and 10.2.0.3 with unknown impact and remote attack vectors. Connected documents indicate Oracle’s October 2007 CPU patch bundle addresses multiple issues including Oracle...

CVE-2007-5530

CVE-2007-5530 maps to a denial-of-service flaw in the Oracle Database Core RDBMS/Database Control stack. The connected CPAI advisory notes a DoS in the Oracle Database Server caused by an error in the Core RDBMS component when it processes an invalid TNS data packet. The vulnerability is remotely...

CVE-2007-5531

Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02...

CVE-2007-5488

CVE-2007-5488 concerns the Asterisk-Addons cdr_addon_mysql module, where the cdr_addon_mysql component fails to escape the source and destination numbers (and possibly SIP URI) when inserting a record. This leads to SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQ...

CVE-2007-5533

Technical details for CVE-2007-5533 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-5514

CVE-2007-5514 pertains to Oracle Database 10.2.0.3 and involves multiple vulnerabilities affecting the Database Vault component (DB24) and the SQL Execution component (DB26). The initial description states unknown impact and attack vectors for these components. A connected Nessus CPU plugin (Octo...

CVE-2007-5524

Technical details for CVE-2007-5524 are not publicly provided in the supplied documents; no specific affected products/versions, root cause, or remediation are disclosed. Monitor for updates.

CVE-2007-5504

CVE-2007-5504 corresponds to multiple vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5, with affected areas including Import (DB01) and Advanced Queuing (DB25). The connected sources reference a suspected buffer overflow in DBLINK_INFO within DBMS_AQADM_SYS for DB25. The available documen...

CVE-2007-5526

Technical details about CVE-2007-5526 are not publicly provided in the supplied documents; no affected product/version or impact specifics are stated. Monitor for updates.

CVE-2007-5529

Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08...

CVE-2007-5509

CVE-2007-5509 affects Oracle Database (Spatial component) and is documented as an unspecified vulnerability in Oracle Database 9.2.0.8 and 9.2.0.8DV with unknown impact and remote attack vectors. The connected materials confirm the affected product/component and version range, but do not provide ...

CVE-2007-5507

CVE-2007-5507 concerns the Oracle Net Services GIOP service on the TNS Listener. The vulnerability, affecting Oracle Database 9.0.1.5+ and certain 9.x/10.x releases, arises when handling a connect GIOP packet with an invalid data size, causing a buffer over-read. This can allow remote attackers t...

CVE-2007-5532

Technical details for CVE-2007-5532 are not publicly available in the provided documents. Monitor for updates in case more information becomes available.

CVE-2007-5491

Summary of CVE-2007-5491 family in SiteBar : The translation module (translator.php) in SiteBar 3.3.8 is vulnerable to a directory traversal attack via the lang parameter (using .. sequences), allowing remote authenticated users to chmod arbitrary files to 0777. Related entries (CVE-2007-5492, CV...

CVE-2007-5492

SiteBar (translation module, translator.php) is affected by CVE-2007-5492: a static code injection vulnerability that lets remote authenticated users execute arbitrary PHP code via the value parameter. The issue is part of a set of related flaws in the translation module (also CVE-2007-5491, CVE-...

CVE-2007-5490

CVE-2007-5490 describes an SQL injection in default.asp of Okul Otomasyon Portal 2.0, exploitable via the id parameter. Affected: Okul Otomasyon Portal 2.0 (default.asp). Root cause: improper handling of user input leading to SQL command execution. Impact: remote attacker can execute arbitrary SQ...

Solaris 10 (x86) : 126449-05

SunOS 5.10x86: Trusted Extensions labeld,. Date this patch was last updated by Sun : Nov/26/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

SA-2007-025 - Drupal core - Arbitrary code execution via installer.

The Drupal installer allows any visitor to provide credentials for a database when the site's own database is not reachable. This allows attackers to run arbitrary code on the site's server. An immediate workaround is the removal of the file install.php in the Drupal root directory. Versions...

openSUSE 10 Security Update : libexif5 (libexif5-3724)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE 10 Security Update : xpdf-tools (xpdf-tools-2472)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...