CVE Vulnerability Catalog

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before version 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID.

A vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects not intended for use within Internet Explorer, as demonstrated using the DDS Library Shape Control (Msdds.dll) and other components.

The vulnerability in the checkBlacklist function in CPAINT is due to an incomplete blacklist. A remote attacker can bypass the security and execute arbitrary commands using the ExecuteGlobal function or GetRef statement, which are not included in the blacklist.

Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.

A buffer overflow vulnerability in servermgrd on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

A buffer overflow in AppKit on Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.

Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window.

The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with 'Requires Authentication: No' even when the user has selected the 'Require pairing for security' option, which could confuse users about which setting is valid.

A buffer overflow vulnerability in Directory Services on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

A vulnerability in Safari on Mac OS X 10.3.9 and 10.4.2 allows a remote attacker to execute arbitrary commands by opening a specially crafted RTF file. Safari, when rendering RTF files, can directly access URLs without performing standard security checks.

Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.

The slpd service in Mac OS X 10.3.9 creates insecure temporary files as root, allowing local users to gain privileges.

Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via kernel headers in a pcap file or data frame dissection, leading to heap-based buffer overflows.

Unknown vulnerability in the frontend authentication in PHlyMail 3.02.00. Impact and attack vectors are unknown.

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.

Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows attackers to gain privileges.

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to Item_Show.asp or search_list.asp.

Parlano MindAlign 5.0 and later versions use weak encryption, which may lead to unauthorized data access. The impact and attack vectors are unknown.