CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter.

Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. It is likely that 2.0.4 addresses an unspecified issue related to 'Anyone can register' functionality (user registration for guests).

A stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet.

A vulnerability in ColdFusion MX 7 allows attackers to bypass authentication by using programmatic access to the AdminAPI instead of the ColdFusion Administrator.

A vulnerability in the ftpd and ksu programs in MIT Kerberos 5 (up to 1.5, and 1.4.x before 1.4.4) and Heimdal (0.7.2 and earlier) fails to check return codes for setuid calls. This might allow local users to gain privileges by causing setuid to fail to drop privileges. As of 20060808, it is not known whether an exploitable attack scenario exists.

The krshd and v4rcp applications in MIT Kerberos 5 (up to 1.5 and 1.4.x before 1.4.4) on Linux and AIX, and in Heimdal 0.7.2 and earlier, do not check return codes for setuid calls. A local user can exploit this by causing setuid to fail to drop privileges (e.g., through resource exhaustion) to gain privileges.

A vulnerability in Winlogon on Microsoft Windows 2000 SP4 occurs when SafeDllSearchMode is disabled. A local user can exploit a malicious DLL placed in the UserProfile directory to elevate privileges.

Buffer overflow vulnerability in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1. It allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message. This is a different vulnerability than CVE-2006-1314.

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."

A buffer overflow in the DNS Client service of Microsoft Windows 2000 SP4, XP SP1/SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted DNS server response. Multiple vectors exist, including a heap-based buffer overflow in a DNS server response, malformed ATMA records, and a length miscalculation in TXT, HINFO, X25, and ISDN records.

Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."

SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the bday_day, bday_month, and bday_year parameters in the personal section.

The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow.

Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects. This allows remote attackers to read cross-domain web pages and possibly execute code via a crafted web page, known as the "Source Element Cross-Domain Vulnerability".

SAPID CMS 123 rc3 contains a remote file inclusion (RFI) vulnerability in usr/extensions/get_infochannel.inc.php and usr/extensions/get_tree.inc.php. An attacker can supply a malicious URL via the root_path parameter or GLOBALS["root_path"], leading to arbitrary PHP code execution on the server.

Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file. Exploitation requires user interaction, such as opening a malicious file.

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll processes a file containing a malformed function. This is also known as the "Hyperlink Object Function Vulnerability."

Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."

A vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID JavaScript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.

A vulnerability in Microsoft Internet Explorer 5 SP4 and 6 involves improper garbage collection when multiple imports are used on a styleSheets collection to construct a chain of Cascading Style Sheets (CSS). This allows remote attackers to execute arbitrary code via unspecified vectors.