Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 87

Export CSV
CVE-2007-4465

mod_autoindex XSS

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS 3.1 · 6.1 Medium EPSS 26.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2007-4658

php money_format format string issue

The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-4670

php malformed cookie handling

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-4769

postgresql integer overflow in regex code

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed
Vendors
Postgresql Redhat Tcl Tk
Products
Postgresql Enterprise Linux Rhel Application Stack and 1 more
CVE-2007-4772

postgresql DoS via infinite loop in regex NFA optimization code

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

CVSS 2.0 · 4.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Canonical Debian Postgresql and 2 more
Products
Ubuntu Linux Debian Linux Postgresql and 3 more
CVE-2007-4782

php crash in glob() and fnmatch() functions

PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.

CVSS 2.0 · 5.0 Medium EPSS 4.7% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-5000

httpd: mod_imagemap XSS

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 46.6% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 4 more
Products
Http Server Ubuntu Linux Fedora and 9 more
CVE-2007-5116

perl regular expression UTF parsing errors

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Debian Larry Wall Mandrakesoft and 3 more
Products
Debian Linux Perl Mandrake Linux and 9 more
CVE-2007-5461

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.

CVSS 2.0 · 3.5 Low EPSS 39.7% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 5 more
CVE-2007-5898

php htmlentities/htmlspecialchars multibyte sequences

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

CVSS 2.0 · 6.4 Medium EPSS 2.8% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-5899

php session ID leakage

The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.

CVSS 2.0 · 4.3 Medium EPSS 3.4% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-5925

mysql DoS in the InnoDB Engine

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

CVSS 2.0 · 4.0 Medium EPSS 11.4% KEV · Not listed
Vendors
Mysql Redhat
Products
Mysql Enterprise Linux Rhel Application Stack
CVE-2007-5969

mysql: possible system table information overwrite using symlinks

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

CVSS 2.0 · 7.1 High EPSS 14.3% KEV · Not listed
Vendors
Mysql Redhat
Products
Community Server Mysql Enterprise Server Mysql Server and 2 more
CVE-2007-6067

postgresql: tempory DoS caused by slow regex NFA cleanup

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Postgresql Redhat Tcl Tk
Products
Postgresql Enterprise Linux Rhel Application Stack and 1 more
CVE-2007-6303

mysql: DEFINER value of view not altered on ALTER VIEW

MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.

CVSS 2.0 · 3.5 Low EPSS 2.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Rhel Application Stack
CVE-2006-0903

Mysql log file obfuscation

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

CVSS 2.0 · 4.6 Medium EPSS 1.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux and 1 more
CVE-2006-3081

security flaw

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

CVSS 2.0 · 4.0 Medium EPSS 25.8% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux and 1 more
CVE-2006-4020

security flaw

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.

CVSS 2.0 · 4.6 Medium EPSS 2.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack and 1 more
CVE-2006-4031

MySQL improper permission revocation

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

CVSS 2.0 · 2.1 Low EPSS 1.7% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux and 1 more