CVE Vulnerability Catalog

Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.

Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but 'critical' impact.

The vulnerability allows remote code execution via PHP file inclusion by manipulating the 'view' parameter in index.php of AlstraSoft EPay Pro 2.0. An attacker can modify this parameter to point to a URL containing malicious code, which will be executed on the server.

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the username or password fields in logIn.asp, or the intAuctionID parameter in item.asp.

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

Buffer overflow vulnerability in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command.

Buffer overflow in luxman before version 0.41, when used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument.

A format string vulnerability in the SetImageInfo function in image.c in ImageMagick before version 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to the convert utility, which may be called by other web applications.

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to alert.php or viewip.php, possibly due to a SQL injection vulnerability.

The reportpost action in misc.php of PhotoPost PHP 5.0 RC3 does not limit the logging data sent to the administrator, allowing remote attackers to send large amounts of email to the administrator.

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to upload and potentially execute files outside the directory via the AttachmentsKey parameter to attachment.do, and delete arbitrary files via the select_file parameter to file.do.

SQL injection vulnerability in viewall.php and category.php of paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in pafiledb.php.

Multiple buffer overflows in DeleGate before version 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to overflows on arrays.

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the root, admin, and user accounts, allowing remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 on Mac OS X allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.

Vulnerability in consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.

The vulnerability in Barracuda Spam Firewall 3.1.10 and earlier allows members of whitelisted domains to send mail to any domain, enabling the device to be used as an open mail relay for spam.

A buffer overflow vulnerability in the Sentinel LM (Lservnt) service in Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.

An unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands due to missing input sanitization.

Vulnerability in ELOG before version 2.5.7 allows a remote attacker to bypass authentication and download a configuration file containing a sensitive write password via a modified URL.