CVE Vulnerability Catalog

The vulnerability in the PNP_GetDeviceList (upnp_getdevicelist) function in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows a remote attacker to cause a denial of service (DoS) through excessive memory consumption. The attack involves sending a DCE RPC request with a large output buffer size.

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in category.php and info.php.

The CodeSupport.ocx ActiveX control, used by Sony to uninstall the First4Internet XCP DRM, has 'safe for scripting' enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode.

Vulnerability in Oracle Databases running on Windows XP with Simple File Sharing enabled allows remote attackers to bypass authentication by supplying a valid username.

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the 'file' parameter, possibly due to a directory traversal vulnerability.

Vulnerability in IBM Informix Dynamic Database server on Windows XP with Simple File Sharing enabled allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.

IBM DB2 database server running on Windows XP with Simple File Sharing enabled allows remote attackers to bypass authentication and log on to the guest account without supplying a password.

A buffer overflow vulnerability has been discovered in the LZX decompression function of CHM Lib (chmlib) version 0.35, used in products such as KchmViewer. The impact and attack vectors are unknown.

Vulnerability in GDAL before version 1.3.0-r1 allows local users in the portage group to escalate privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.

SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL commands via the sug parameter.

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.

SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

An unknown vulnerability in the remshd daemon on HP-UX B.11.00, B.11.11, and B.11.23 running in Trusted Mode allows remote attackers to gain unauthorized system access via unknown attack vectors.

SQL injection vulnerability in the report module of ibProArcade 2.5.2 and earlier. Remote attackers can execute arbitrary SQL commands via the 'user' parameter in index.php.

A buffer overflow vulnerability in FileZilla Server Terminal 0.9.4d allows remote attackers to cause a denial of service (terminal crash) by sending a long USER FTP command.

By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer.

In Clam AntiVirus (ClamAV) before version 0.87.1, improper boundary checks in petite.c allow attackers to perform unknown attacks via unknown vectors.

A SQL injection vulnerability was found in the index.php file of Peel versions 2.6 through 2.7. Remote attackers can execute arbitrary SQL commands via the rubid parameter.

Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in conjunction with the login/userinfo.php path and the session parameter (aka the PHPKITSID variable).