CVE Vulnerability Catalog

Buffer overflow in the IKEv1 implementation in ADTRAN NetVanta before version 10.03.03.E. A remote attacker can exploit crafted IKE packets, potentially leading to unspecified impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form.

Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the GroupsId and ItemsId parameters in admin.php.

IKEv1 implementations in FortiOS, FortiClient, and FortiManager allow remote attackers to cause a denial of service by sending IKE packets with invalid IPSec attribute values. The attack terminates a process that is automatically restarted.

A stack-based buffer overflow in index.fts of FTGate 4.4 (Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tzoffset value.

A format string vulnerability in the IKEv1 implementation in ADTRAN NetVanta before version 10.03.03.E may allow a remote attacker to cause an unknown impact by sending crafted IKE packets containing format string specifiers, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Multiple format string vulnerabilities in FTGate 4.4 POP3 (USER, PASS, TOP) and IMAP (LIST, AUTHENTICATE) commands allow remote attackers to execute arbitrary code via crafted format specifiers.

An unspecified vulnerability in the GTP dissector of Ethereal versions 0.9.1 through 0.10.13 allows remote attackers to cause an infinite loop, resulting in a denial of service (DoS). The attack can be carried out via unknown vectors.

Electric Sheep 2.6.3 does not require authentication or integrity checks between server and client, allowing remote attackers to download and display arbitrary MPEG files via DNS spoofing, command-line URL, or configuration file URL. The description notes similar attack vectors apply to web browsers, questioning its specificity.

The vulnerability in rssh versions 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command to chroot to an external directory.

A vulnerability in the Windows GDI32.DLL library allows remote code execution via a crafted WMF image with a SETABORTPROC GDI Escape call, affecting the Picture and Fax Viewer (SHIMGVW.DLL). This flaw was originally exploited in the wild on unionseek.com.

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the cat parameter in openforum.php and getfile.php, and the target parameter in download_now.php.

SQL injection vulnerability in the user area of RWS Statistics Counter before version 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

A buffer overflow vulnerability exists in Golden FTP Server 1.92 when handling the APPE command. Remote attackers can exploit this to execute arbitrary code on the server.

A remote file inclusion vulnerability in IceWarp Web Mail 5.5.1, used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via the lang_settings and language parameters in accounts/inc/include.php and admin/inc/include.php.

The slsmgr and slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, allowing local users to gain privileges.

In eggblog 2.0, the search.php file mishandles the q parameter, allowing an attacker to disclose the full server path. This issue may be related to an SQL injection vulnerability.

The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php.

Multiple SQL injection vulnerabilities were found in Mantis 1.0.0rc3 and earlier in the manage user page. Remote attackers can execute arbitrary SQL commands via the 'prefix' and 'sort' parameters in manage_user_page.php and the 'sort' parameter in view_all_set.php.