CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities exist in class.php in Professional Home Page Tools Guestbook. A remote attacker can execute arbitrary SQL commands via the hidemail, name, mail, ip, or text parameters.

PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 allow local CS-MARS administrators to execute arbitrary commands as root.

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.

A vulnerability in jmx-console/HtmlAdaptor in the jmx-console of the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.

An integer overflow vulnerability in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code by passing a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, leading to an invalid memory copy.

A vulnerability in the Linux kernel 2.6.x occurs when both NFS and EXT3 are used together. A remote attacker can send a crafted UDP packet with a V2 lookup procedure specifying a bad file handle (inode number), triggering a file system panic and causing an exported directory to be remounted read-only.

Eskolar CMS 0.9.0.0 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the gr_1_id, gr_2_id, gr_3_id, and doc_id parameters in index.php, the uid and pwd parameters in php/esa.php, and possibly other vectors in files under php/lib/.

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3. The impact and attack vectors are unknown, referred to as Oracle Vuln# PSE01.

Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04.

Multiple unspecified vulnerabilities exist in Oracle E-Business Suite and Applications 11.5.9, affecting Oracle Application Object Library and Oracle XML Gateway. Technical details, impact, and attack vectors have not been disclosed.

Oracle Database 10.1.0.5 contains multiple unspecified vulnerabilities with unknown impact and attack vectors, identified as Oracle Vuln# DB21 (Statistics) and DB22 (Upgrade & Downgrade). According to a reliable researcher, DB21 is a local SQL injection vulnerability in SYS.DBMS_STATS, and DB22 is SQL injection in SYS.DBMS_UPGRADE.

Multiple format string vulnerabilities in Wireshark (formerly Ethereal) versions 0.10.x through 0.99.0 exist in the ANSI MAP, Checkpoint FW-1, MQ, XML, and NTP dissectors. A remote attacker can exploit these flaws to cause a denial of service (application crash) and possibly execute arbitrary code.

Multiple off-by-one errors exist in Wireshark (formerly Ethereal) versions 0.9.7 through 0.99.0 within the NCP NMAS and NDPS dissectors. The vulnerability can be exploited remotely, but the exact impact is unknown.

Buffer overflow in Wireshark (formerly Ethereal) versions 0.8.16 through 0.99.0. A remote attacker can exploit this via the NFS dissector, causing a denial of service and possibly executing arbitrary code.

Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.

Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.

Oracle Database versions 9.2.0.6 and 10.1.0.4 contain multiple unspecified vulnerabilities with unknown impact and attack vectors. They affect Web Distributed Authoring and Versioning (DAV) and XMLDB components, identified as Oracle Vuln# DB04 and DB23.

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, specifically in the Change Data Capture (CDC) component and Data Pump Metadata API. According to a researcher, DB01 relates to multiple SQL injection vulnerabilities in SYS.DBMS_CDC_IMPDP procedures, and DB03 relates to SQL injection in the MAIN procedure for SYS.KUPW$WORKER.

A vulnerability in Agnitum Outpost Firewall Pro 3.51.759.6511 (462), also used in Lavasoft Personal Firewall 1.0.543.5722 (433) and Novell BorderManager Novell Client Firewall 2.0, improperly restricts user activities in application windows running in a LocalSystem context. This allows local users to gain privileges and execute commands via the "open folder" option when no instance of explorer.exe is running, or by overwriting a batch file through the "Save Configuration As" option. It might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.