CVE Vulnerability Catalog

SQL injection vulnerability in the Authentication Servlet of Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via specially crafted URL requests.

The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.

SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified parameters in a login action.

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, allowing remote attackers to perform unspecified privileged actions by directly accessing files via a URL.

A PHP remote file inclusion vulnerability in loginout.php of FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter.

Multiple SQL injection vulnerabilities were found in PHP GEN before version 1.4. Unknown attack vectors allow remote attackers to inject arbitrary SQL commands.

Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via the catview parameter in cal_functions.inc.php and the login parameter in cal_login.php.

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field.

SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.

A vulnerability in Cisco VPN 3000 series concentrators running software versions 4.7.0 through 4.7.2.A allows remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.

Buffer overflow vulnerability in git-checkout-index in GIT before version 1.1.5. A remote attacker can exploit a specially crafted index file with a long symbolic link to execute arbitrary code.

A buffer overflow vulnerability in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a specially crafted playlist (.pls) file with an overly long filename in the File1 field.

A vulnerability in CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php.

Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via a large packet length field causing overflow in the ReadBuffer function in BTPacket.cpp and EDPacket.cpp, or via a large packet causing a heap-based overflow in the Write function in Packet.h.

A heap-based buffer overflow in Splash.cc in xpdf, also used in poppler, kdegraphics, gpdf, and pdfkit.framework, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that exceed the width or height of the associated bitmap.

CommuniGate Pro Core Server before version 5.0.7 is vulnerable to a remote denial of service (crash) and potential arbitrary code execution via crafted LDAP messages with negative BER lengths.

SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the entrada parameter.

IdeoContent Manager contains SQL injection vulnerabilities in index.php. Remote attackers can execute arbitrary SQL commands via the goto_id or mid parameters.

A vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via crafted HTML. This can expose the browser to attacks that would otherwise be prevented by the Kill bit setting.

Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username in SMTP AUTH PLAIN or AUTH LOGIN commands, a long username in the POP3 APOP command, or a long IMAP DELETE command.