CVE Vulnerability Catalog

A vulnerability in JunkBuster before version 2.0.2-r3 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via heap corruption during URL filtering.

A buffer overflow vulnerability in MailEnable IMAP server (MEIMAP.exe) allows remote attackers to execute arbitrary code by sending a long LOGIN command.

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but 'critical' impact.

Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.

Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the file_id parameter to dlman.php in DLMan Pro or id parameter to links.php in Linkz Pro.

PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the 'dir' parameter in article.php, authorall.php, comment.php, display.php, and displayall.php.

Vulnerability in Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 with Active Directory allows local users to bypass group policies restricting access to hidden drives. The attack can be performed using the browse feature in Office 10 applications such as Word or Excel, or by using a flash drive.

A format string vulnerability in the SetImageInfo function in image.c in ImageMagick before version 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to the convert utility, which may be called by other web applications.

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to alert.php or viewip.php, possibly due to a SQL injection vulnerability.

The reportpost action in misc.php of PhotoPost PHP 5.0 RC3 does not limit the logging data sent to the administrator, allowing remote attackers to send large amounts of email to the administrator.

Buffer overflow in luxman before version 0.41, when used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument.

Buffer overflow vulnerability in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command.

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to upload and potentially execute files outside the directory via the AttachmentsKey parameter to attachment.do, and delete arbitrary files via the select_file parameter to file.do.

SQL injection vulnerability in viewall.php and category.php of paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in pafiledb.php.

Multiple buffer overflows in DeleGate before version 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to overflows on arrays.

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the root, admin, and user accounts, allowing remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 on Mac OS X allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.

SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.