CVE Vulnerability Catalog

A remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code by supplying a URL in the css_path parameter in (1) help.php and (2) setup/header.php.

Buffer overflow vulnerability in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier. A remote attacker can cause a denial of service (crash) and possibly execute arbitrary code by manipulating packet values such as a negative chunk_length, a large chunk->offset, or a large packet->length.

SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the news_id, tid, and page_id parameters.

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter.

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the post_id parameter in index.php and the search function.

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 involves improper clearing of a JavaScript reference to a frame or window. This leaves a pointer to a deleted object, allowing remote attackers to execute arbitrary native code.

A vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges. This may lead to code execution or access to sensitive data by reading into a privileged context.

A vulnerability in Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via JavaScript leading to memory corruption. The vulnerabilities include buffer overflows in the string class, issues with table row and column groups, stale references to removed nodes, and running the crypto.generateCRMFRequest callback on a deleted context.

A vulnerability in the JavaScript engine of Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code. The exploit involves garbage collection that deletes a temporary object still in use.

A vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling named JavaScript functions that use the constructor.

Multiple integer overflows exist in the JavaScript engine of Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3. The vulnerability can be exploited remotely via long strings in the toSource method of Object, Array, and String objects, and unspecified string function arguments, potentially leading to arbitrary code execution.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window.navigator object that are accessed when Java starts up, causing a crash that leads to code execution.

Multiple stack-based buffer overflows exist in Tumbleweed Email Firewall (EMF). The vulnerability can be exploited remotely by sending an email attachment containing an LHA archive with a file or directory with a long LHA extended header, a "temporary pathname" field longer than 2 bytes, or a long filename. This allows arbitrary code execution.

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'page' parameter in a 'viewgallery' action in a request for the top-level URI.

Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF".

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including Sidewinder, iPolicy Security Manager, Astaro Report Manager, Fortinet FortiReporter, and Top Layer Network Security Analyzer. A remote attacker can execute arbitrary code via long commands sent to the Syslog daemon (syslogserver.exe), Topology server (Topology.exe), License Manager (EnterpriseSecurityAnalyzer.exe), and Monitoring agent (Monitoring.exe).

Multiple SQL injection vulnerabilities exist in links.php in Gonafish LinksCaffe 3.0. Remote attackers can execute arbitrary SQL commands via the offset, limit, newdays, and link_id parameters, and can also disclose paths or modify PHP files using OUTFILE.