CVE Vulnerability Catalog

A heap-based buffer overflow in Apple QuickTime before version 7.1 in the ReadBMP function allows remote attackers to execute arbitrary code via a crafted BMP file. This issue was originally part of CVE-2006-1983 but is now a separate CVE.

A vulnerability in QuickTime Streaming Server on Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) by sending a QuickTime movie with a missing track, triggering a null pointer dereference.

A buffer overflow in QuickTime Streaming Server on Apple Mac OS X 10.3.9 and 10.4.6 occurs when processing a crafted RTSP request during message logging. This allows a remote attacker to execute arbitrary code.

MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the provided 'New MySQL root password', leaving the MySQL root password blank. This allows local users to gain full privileges to that database.

In Apple Mac OS X 10.3.9 and 10.4.6, the bundle API in CoreFoundation loads dynamic libraries even if the client application has not directly requested it. This allows attackers to execute arbitrary code from an untrusted bundle.

In Apple Mac OS X 10.3.9 and 10.4.6, the Mail application contains an integer overflow when processing MacMIME encapsulated attachments. A remote attacker can exploit this vulnerability to execute arbitrary code via a crafted attachment.

An integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.

A vulnerability in the Mail application on Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code by sending an enriched text email message with invalid color information, causing Mail to allocate and initialize arbitrary classes.

IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root.

In vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, a remote attacker can authenticate to an account that does not have a cleartext password set by using a blank password for SMTP AUTH or APOP.

Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls.

The vulnerability in 180solutions Zango software downloads required adware components without integrity or authenticity checks. This allows context-dependent attackers to execute arbitrary code by subverting DNS resolution of static.zangocash.com.

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges and view and configure log files via a direct request to the admin.php or settings.php pages.

The vulnerability in Ideal Science Ideal BB 1.5.4a and earlier is due to an incomplete blacklist of file extensions. An attacker can upload and execute an ASP script using a .asa file, which bypasses the check for the .asp extension but is executable on the server.

PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier. An attacker can execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter.

The vulnerability in the Verisign VUpdater.Install (i-Nav) ActiveX control allows a remote attacker to execute arbitrary executable files without verifying Microsoft Cabinet (.CAB) files.

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the CatID, SubjectID, and Pic parameters.

Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) of Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to execute arbitrary code via an XDR encoded array with a field specifying a large number of elements, triggering overflows in the ndps_xdr_array function.

SQL injection vulnerability in admin_default.asp of DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the Login or password fields.

A Cross-Site Scripting (XSS) vulnerability in moreinfo.asp of EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter. The details are obtained solely from third party information.