CVE Vulnerability Catalog

SQL injection vulnerability in download.php of PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.

A stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via long verb arguments.

Multiple unspecified format string vulnerabilities in various IKEv1 implementations, discovered by the PROTOS ISAKMP Test Suite, allow attacks through unspecified vectors leading to unknown impacts. Due to lack of details in original sources, this candidate is likely to be rejected once vulnerable implementations are identified.

The IKEv1 implementation in the libike library in Sun Solaris 9 and 10 allows a remote attacker to cause a denial of service (in.iked crash) by sending crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

The IKEv1 implementation in Check Point products is vulnerable to a DoS attack via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Due to lack of details, it is unclear which specific CVE (CVE-2005-3666, CVE-2005-3667, or CVE-2005-3668) this issue applies to.

Multiple unspecified vulnerabilities in the IKEv1 implementation in HP-UX, Jetdirect, and Tru64 UNIX allow remote attackers to cause a denial of service via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

The IKEv1 implementation in Openswan 2 before 2.4.4 and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23 allows remote attackers to cause a denial of service via a crafted packet using 3DES with an invalid key length or unspecified inputs when Aggressive Mode is enabled and the PSK is known.

A heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allows remote attackers to execute arbitrary code via a crafted CHM file.

Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious 'program.exe' file in the C: folder.

A vulnerability in the gdk-pixbuf library of GTK+ before version 2.8.7 allows an attacker to cause an infinite loop via a crafted XPM image with a large number of colors, leading to a denial of service (DoS).

An unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious 'program.exe' file in the C: folder, involving the programs GIANTAntiSpywareMain.exe, gcASNotice.exe, gcasServ.exe, gcasSWUpdater.exe, or GIANTAntiSpywareUpdater.exe.

Unquoted Windows search path vulnerability in RealPlayer allows local users to gain privileges via a malicious C:\program.exe file.

An unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious 'program.exe' file in the C: folder.

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.

Multiple directory traversal vulnerabilities in Tikiwiki before version 1.9.1 allow remote attackers to read arbitrary files and execute commands via the suck_url parameter to tiki-editpage.php or the language parameter to tiki-user_preferences.php.

Lynx versions before 2.8.6dev.15 allow remote attackers to execute arbitrary system commands via lynxcgi:, lynxexec, and lynxprog links, which are not properly restricted in the default configuration in some environments.

Vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows due to an unquoted Windows search path. A local user can exploit a malicious C:\program.exe file to escalate privileges.

Stack-based buffer overflow in a shared library used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.

An integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values.

The CodeSupport.ocx ActiveX control, used by Sony to uninstall the First4Internet XCP DRM, has 'safe for scripting' enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode.