CVE Vulnerability Catalog

The pstopnm tool in netpbm improperly uses the "-dSAFER" option when calling Ghostscript to convert a PostScript file into PBM, PGM, or PNM formats. This allows external user-assisted attackers to execute arbitrary commands.

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.

Unknown vulnerability in apt-cacher in Debian 3.1, related to 'missing input sanitising,' allows remote attackers to execute arbitrary commands on the caching server.

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port 6070 or 6050.

B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg.

SQL injection vulnerability in login.asp of Thomson Web Skill Vantage Manager. Remote attacker can execute arbitrary SQL commands via the svmPassword parameter.

Multiple SQL injection vulnerabilities in Contrexx before version 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 'value' parameter in the poll module or the 'pId' parameter in the gallery module.

SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.

The Gopher client version 3.0.5 contains a vulnerability in gopher.c that improperly creates temporary files, allowing local users to escalate privileges.

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the 'id' argument to admin pages such as 'members' or 'admin'.

Stack-based buffer overflow in Ares FileShare 1.1 allows remote or local attackers to execute arbitrary code via a long history parameter in the configuration file (ares.conf) or a long search string.

Buffer overflow vulnerability in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section.

The vulnerability in the flsearch.pl script of FtpLocate 2.02 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters in an HTTP GET request.

Multiple integer overflows in the TNEF, CHM, and FSG file format processors in libclamav for ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter.

SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter.

Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.

A format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.

Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.