CVE Vulnerability Catalog

Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with 'Use SmileyAdd Setting' enabled, allows remote attackers to execute arbitrary code.

Betaparticle blog (bp blog), possibly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.

The netfilter/iptables module in Linux kernel before version 2.6.8.1 contains a vulnerability that allows a remote attacker to cause a kernel crash (denial of service) or bypass firewall rules by sending crafted packets. The issue is due to improper handling of packets by the skb_checksum_help function.

A vulnerability in Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via a script that includes the max.src file into the source page.

CoolForum 0.8.1 beta and earlier versions disclose the full system path in PHP error messages when specific scripts are directly requested. This vulnerability allows an attacker to obtain sensitive information about the server's directory structure.

Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain time or date fields.

Heap-based buffer overflow in the SGI parser in ImageMagick before version 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.

A vulnerability in Firefox before version 1.0.3 and Mozilla Suite before version 1.7.7 allows a remote attacker to execute arbitrary code via a javascript: URL that is executed when the user selects the 'Show javascript' option after a popup is blocked.

Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.

A vulnerability in loader.php of Ariadne CMS 2.4 that allegedly allows remote PHP code injection by modifying the ariadne parameter to point to a URL containing malicious code. The vendor disputes this, stating that loader.php first requires the ariadne.inc file which defines the $ariadne variable, preventing modification by an attacker. CVE personnel partially verified the dispute via source code inspection of Ariadne 2.4 as of July 5, 2005.

SQL injection vulnerability in the Knowledge Base module for phpBB in kb.php allows remote attackers to inject SQL queries via the cat parameter, potentially leading to sensitive information disclosure and arbitrary SQL command execution.

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.

Vulnerability in Cisco IOS 12.2T, 12.3, and 12.3T involves improper processing of ISAKMP profile with XAUTH authentication after Phase 1 negotiation. A remote attacker can bypass XAUTH and proceed to Phase 2 negotiations.

The administration protocol in Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request.

Vulnerability in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka 'Cross-site scripting through global scope pollution.'

SQL injection vulnerability in the getwbbuserdata function in session.php in Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the userid or lastvisit cookie parameters.

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

SQL injection vulnerability in PhotoPost PHP Pro 5.x allows remote attackers to execute arbitrary SQL commands via the 'sl' parameter in showmembers.php or the 'photo' parameter in showphoto.php.

PHP remote file inclusion vulnerability in index_header.php of EncapsBB 0.3.2_fixed (and possibly other versions) via the root parameter allows remote attackers to execute arbitrary PHP code.