Vulnerabilities > Openbase International LTD
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-11-10 | CVE-2007-5929 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openbase International LTD Openbase Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption. | 9.0 |
| 2007-11-10 | CVE-2007-5928 | Improper Input Validation vulnerability in Openbase International LTD Openbase OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. | 9.0 |
| 2007-11-10 | CVE-2007-5927 | Path Traversal vulnerability in Openbase International LTD Openbase Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. | 9.0 |
| 2007-11-10 | CVE-2007-5926 | Improper Input Validation vulnerability in Openbase International LTD Openbase OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures. | 9.0 |
| 2006-11-10 | CVE-2006-5852 | Local Security vulnerability in Openbase Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327. | 4.6 |
| 2006-11-10 | CVE-2006-5851 | Link Following vulnerability in Openbase International LTD Openbase openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328. | 2.1 |