CVE Vulnerability Catalog

Unknown vulnerability in the serendipity_config_local.inc.php file in Serendipity before version 0.8. The impact details are unknown.

The media manager in Serendipity before version 0.8 allows remote attackers to upload and execute arbitrary .php or .shtml files.

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to perform administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html.

SQL injection vulnerability in search.php in PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument.

Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the username or password parameters to admin_login.asp, or the searchstring and possibly ID parameters to default.asp.

The vulnerability in Cocktail 3.5.4 and earlier on Mac OS X passes the administrative password in cleartext on the command line to sudo, allowing local users to gain sensitive information by listing processes.

The vulnerability in the edit_image.asp script of Uapplication Uphotogallery allows remote attackers to upload arbitrary files to the server.

In Claroline 1.5.3 through 1.6 Release Candidate 1 and possibly Dokeos, the scripts document.php and insertMyDoc.php contain directory traversal vulnerabilities. This allows remote project administrators to upload arbitrary files.

The BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.

The vulnerability in Uphotogallery involves storing the database file in the web document root, allowing remote attackers to directly request uphotogallery.mdb and obtain sensitive information.

Claroline versions 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, contain multiple PHP remote file inclusion vulnerabilities. These flaws allow remote attackers to execute arbitrary PHP code on the server via unknown vectors.

PHP remote file inclusion vulnerability in main.php of osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

Vulnerability in PostgreSQL versions 7.3.x through 8.0.x grants public EXECUTE access to certain character conversion functions, allowing unprivileged users to call these functions with malicious values, with unknown impact.

Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but 'critical' impact.

A vulnerability in JunkBuster before version 2.0.2-r3 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via heap corruption during URL filtering.

A format string vulnerability in IDA Pro 4.7.0.830 allows remote or local attackers to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a DLL name.

Multiple buffer overflows in Cyrus IMAPd before version 2.2.11 may allow attackers to execute arbitrary code via an off-by-one error in the imapd annotate extension, an off-by-one error in cached header handling, a stack-based buffer overflow in fetchnews, or a stack-based buffer overflow in imapd.

Buffer overflow vulnerability in discdb.c of grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.