CVE Vulnerability Catalog

A buffer overflow vulnerability in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.

An unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System versions 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.

An integer overflow in pcre_compile.c in PCRE before version 6.2 allows attackers to execute arbitrary code via crafted quantifier values in regular expressions, leading to a heap-based buffer overflow.

The vulnerability in EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 is due to improper verification of authentication tokens. A remote attacker can modify an authentication token to gain unauthorized privilege escalation.

Buffer overflow in Sysinternals Process Explorer 9.23 and earlier versions before 9.25 allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

The vulnerability in the SpellChecker plugin in DTLink AreaEdit before version 0.4.3 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the 'dictionary' parameter (also known as the 'lang' variable) in the aspell_setup.php file.

A buffer overflow vulnerability in the Log-SCR function of WinFtp Server 1.6.8 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via a long request.

Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the Match or CatID parameter in SearchResults.php or the password in AccessControl.php.

Multiple PHP file inclusion vulnerabilities in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7 allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

Unknown vulnerability in pam_ldap before version 180 improperly handles a new password policy control, which could allow attackers to gain privileges.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via parameters in forums.php, list.php, journal.php, and links.php. The vendor has disputed this issue, stating that variables are properly sanitized.

The vulnerability in Cisco Clean Access (CCA) versions 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 is due to improper user authentication when invoking API methods. A remote attacker can exploit this flaw to bypass security checks, change a user's assigned role, or disconnect users.

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before version 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

The vulnerability in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 relies on AUTH_UNIX authentication, which uses user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.

A buffer overflow vulnerability in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.

An unknown vulnerability in the Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the x or y parameters.