CVE-2007-2109

CVE-2007-2109 affects Oracle Database 10.2.0.3 with reported issues in two components: (1) Rules Manager and Expression Filter (DB02) due to a race condition in the RLMGR_TRUNCATE_MAINT trigger that can change AUTHID from DEFINER to CURRENT_USER after TRUNCATE, and (2) Oracle Streams (DB06) due t...

CVE-2007-2114

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to 1 Change Data Capture CDC, aka DB08, and 2 Oracle Instant Client, aka DB11. NOTE: as of 20070424, oracle has not disputed reliable claims that thes...

Buffer overflow

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service CPU consumption via crafted documents, as demonstrated by 1 file798-1.doc and 2 file613-1.doc, possibly related to a buffer overflow...

Code injection

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2007-1829

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2007-1829

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2007-1829

Technical details for CVE-2007-1829 are not publicly available in the provided documents. Monitor for updates from official advisories; the materials here do not specify affected products, impact, vectors, or mitigations.

CVE-2007-1796

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

Design/Logic Flaw

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2007-1796

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2007-1431

Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service crash related to the 1 speak and 2 buy functions...

Code injection

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...

CVE-2007-1193

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...

CVE-2007-1098

ScryMUD before 2.1.11 is affected by multiple vulnerabilities with unknown specific impact and attack vectors. The available data explicitly notes a potential denial-of-service scenario related to a search that begins with a .*, implying the issue could be triggered through search handling. The C...

CVE-2007-0974

Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack vectors, possibly related to a variable extraction vulnerability...

CVE-2007-0841

CVE-2007-0841 covers VBDrupal before 4.7.6.0 with multiple unspecified vulnerabilities; the Drupal-related vector is addressed by CVE-2007-0626. The linked CVE-0626 specifies a remote code execution path via previewing comments in Drupal (and vbDrupal) before 4.7.6.0 (Drupal 4.7.6 and 5.x before ...

Code injection

Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors...

CVE-2007-0303

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

CVE-2007-0303

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

CVE-2007-0290

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to 1 Application Object Library APPS01, 2 Human Resources APPS03, 3 Payables APPS04, 4 Trading Community Architecture APPS05, and 5 Web Applications Desktop...