Skip to content
Noroxi

borland software records

14 published records for vendor borland software. 0 of them have been exploited in the wild (listed in CISA KEV) and 3 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 21.4%
Pre-auth RCE
4
With a fix record
7.1%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    14 records
    • CVE-2004-0204
      52Plan

      Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used

      HighCVSS 7.5Proof of conceptEPSS 72%

      bea · weblogic serverAug 6, 2004

    • CVE-2007-3566
      50Plan

      Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute a

      HighCVSS 7.5WeaponizedEPSS 66%

      borland software · interbaseJul 26, 2007

    • CVE-2007-5243
      49Plan

      Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote a

      CriticalCVSS 9.3WeaponizedEPSS 40%

      borland software · interbaseOct 6, 2007

    • CVE-2007-5244
      48Plan

      Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allow

      CriticalCVSS 9.3WeaponizedEPSS 37%

      borland software · interbaseOct 6, 2007

    • CVE-2001-0008
      44Plan

      Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

      CriticalCVSS 10.0Proof of conceptEPSS 13%

      borland software · interbaseFeb 12, 2001

    • CVE-2006-6201
      31Monitor

      Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006;

      HighCVSS 7.5No exploitEPSS 3%

      revilloc · mailserverNov 30, 2006

    • CVE-2004-1833
      31Monitor

      The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database admin

      HighCVSS 7.5No exploitEPSS 2%

      borland software · interbaseMar 20, 2004

    • CVE-2002-1514
      28Monitor

      gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporar

      HighCVSS 7.2Proof of conceptEPSS 0%

      borland software · interbaseApr 2, 2003

    • CVE-2003-0197
      28Monitor

      Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (I

      HighCVSS 7.2No exploitEPSS 0%

      borland software · interbaseApr 11, 2003

    • CVE-2004-2043
      24Monitor

      Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase code

      MediumCVSS 5.0Proof of conceptEPSS 11%

      borland software · interbaseMay 1, 2004

    • CVE-2004-2121
      21Monitor

      Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbit

      MediumCVSS 5.0Proof of conceptEPSS 3%

      borland software · web server for corel paradoxDec 31, 2004

    • CVE-2002-2087
      18Monitor

      Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling

      MediumCVSS 4.6Proof of conceptEPSS 1%

      borland software · interbaseDec 31, 2002

    • CVE-2006-0634
      18Monitor

      Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals

      MediumCVSS 4.6No exploitEPSS 0%

      borland software · c\+\+ builderFeb 10, 2006

    • CVE-2000-0866
      8Monitor

      Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.

      LowCVSS 2.1No exploitEPSS 0%

      borland software · interbase superserverNov 14, 2000