CVE Vulnerability Catalog

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.

SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands.

In the modes.c file in smail 3.2.0.120, signal handlers are implemented using unsafe library calls. This may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.

SQL injection vulnerability in imageview.php in SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the idalbum or idimage parameters.

Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the parent or sortposted parameter.

PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.

Buffer overflow vulnerability in netpmon on AIX 5.1, 5.2, and 5.3. A local user can exploit a long -O argument to execute arbitrary code.

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.

The vulnerability in the Solaris Management Console (SMC) GUI for Solaris 8 and 9 causes user accounts configured for password aging to be created with a blank password, allowing remote or local attackers to break into those accounts.

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.

Vulnerability in ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.

Vulnerability in Cisco IOS 12.2T, 12.3, and 12.3T when using Easy VPN Server XAUTH version 6 authentication allows a remote attacker to bypass authentication by sending a malformed packet.

PHPOpenChat 3.0.1 and earlier contain multiple PHP remote file inclusion vulnerabilities, allowing an attacker to execute arbitrary PHP code via the phpbb_root_path, poc_root_path, and sourcedir parameters.

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if 'Allow Creation of Accounts From the Web Interface' is disabled, via a direct HTTP POST request.

The custom avatar uploading feature (uploader.php) in XOOPS 2.0.9.2 and earlier does not filter file extensions, allowing remote attackers to upload arbitrary PHP scripts.

The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by sniffing the connection on TCP port 51100 and replaying the authentication information or obtaining and replaying the PCZQX02 authentication cookie from the browser.

Heap-based buffer overflow in the env_opt_add function in telnet.c in BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses containing a large number of characters requiring escaping, consuming more memory than allocated.

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via various parameters, including nChannel, iChannel, iCat, iData, POL_ID, POL_PARENT, POL_CATEGORY, CHA_NAME, CHA_ID, tfm_order, and tfm_orderby.

Buffer overflow vulnerability in Sun Java System Web Proxy Server (also known as Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors.