CVE Vulnerability Catalog

The DHCP Client service in Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 contains a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code via a crafted DHCP response.

An unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when parsed.

Kaillera Server 0.86 and earlier contains a stack-based buffer overflow. A remote attacker can exploit this vulnerability by sending a long nickname, potentially leading to arbitrary code execution.

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in gbrowse.php, the card_id parameter in rating.php and create.php, and the event_id parameter in search.php.

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.

Multiple PHP remote file inclusion (RFI) vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code by supplying a URL in the qb_path parameter to index.php, about.php, contact.php, delete.php, faq.php, features.php, and history.php. This is a different set of vectors than CVE-2006-2998.

CRLF injection vulnerability in the form_mail Drupal module before 1.8.2.2 allows remote attackers to inject email headers, facilitating spam sending. This is a different issue than CVE-2006-1225.

Remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier. When register_globals is enabled, a remote attacker can execute arbitrary PHP code by supplying a URL in the domain parameter.

Wiele podatności typu SQL injection w Joomla! przed wersją 1.0.10 umożliwia zdalnym atakującym wykonywanie dowolnych poleceń SQL poprzez nieokreślone parametry związane z funkcją 'Zapamiętaj mnie', modułem 'Powiązane elementy' oraz przesyłaniem 'Linków internetowych'.

The ftdi_sio driver in Linux kernel 2.6.x up to 2.6.17 allows local users to cause a denial of service by writing more data to the serial port than the hardware can handle, leading to memory exhaustion due to queued data.

The Dell OpenManage CD launches X11 and SSH daemons that do not require authentication. This allows remote attackers to gain privileges.

A buffer overflow vulnerability in the EPUImageControl Class (EUPWALcontrol.dll) before version 1.0.3.48, used in eBay applications, allows a remote attacker to execute arbitrary code via a crafted HTML document.

A buffer overflow vulnerability exists in certain Asian language versions of Microsoft Excel. A user-assisted attacker can execute arbitrary code by enticing a user to open a crafted spreadsheet containing a malicious STYLE record, which triggers the overflow when the user attempts to repair the document or selects the "Style" option.

FastPatch in PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, as well as Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp. This allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers by modifying the List, Proxy, or Delete parameters.

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.

A PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, affecting multiple templates including rwb, gwb, blues, bluwhi, and grns.

Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user. Attackers can delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action.

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components. A remote attacker can use a malicious website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download and execute an arbitrary DLL file.