CVE Vulnerability Catalog

Buffer overflow in the getnickuserhost function in BNC 2.8.9 (and possibly other versions) allows a remote IRC server to execute arbitrary code by sending a response containing many '!' or '@' characters.

Integer underflow in pppd (ppp 2.4.1) in cbcp.c allows a remote attacker to cause a denial of service (daemon crash) by sending a CBCP packet with an invalid length value, leading to access of an incorrect memory location.

Multiple buffer overflows in libXML versions 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via a long FTP URL, a long proxy URL containing FTP data, and other overflows related to manipulation of DNS length values.

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Vulnerability in iCal before version 1.5.4 on Mac OS X 10.2.3 and later versions does not alert the user when handling calendars that use alarms, allowing attackers to execute programs and send email via alarms.

Vulnerability in iptables before version 1.2.11 causes required modules to not be properly loaded during system startup under certain conditions. As a result, firewall rules fail to load, exposing the system to remote attacks.

A heap-based buffer overflow in server.cpp of WebMod 0.47 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code by sending a POST request with a Content-Length header smaller than the actual data sent.

The vulnerability in bsmtpd 2.3 and earlier versions is due to improper sanitization of email addresses, allowing a remote attacker to execute arbitrary commands.

A vulnerability in the ImageGalleryPlugin (ImageGalleryPlugin.pm) for Twiki allows a remote attacker to execute arbitrary system commands via specially crafted thumbnail generation commands.

Vulnerability in ArGoSoft FTP Server before version 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command. This is a different vulnerability than CVE-2005-0519.

Cross-Site Request Forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.

Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 allow remote attackers to execute arbitrary SQL statements via the cats, l_price, or u_price parameters.

Vulnerability in misc.php in vBulletin 3.0.6 and earlier, when 'Add Template Name in HTML Comments' is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.

Multiple integer overflows in the sftp_pkt_getstring and fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56 and earlier allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory allocation.

PHP remote file inclusion vulnerability in Tar.php of Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.

The RgSecurity form in the HTTP server of the Thomson TCW690 cable modem (firmware 2.1, software ST42.03.0a) allows an attacker on the LAN to change the password without proper validation via a direct POST request.

PHP remote file inclusion vulnerability in mail_autocheck.php of the Email This Entry add-on for pMachine Pro 2.4 (and possibly other versions including pMachine Free). An attacker can directly request mail_autocheck.php and modify the pm_path parameter to reference a URL on a remote server containing malicious PHP code, leading to its execution.

Vulnerability in ArGoSoft FTP Server before version 1.4.2.7 allows remote attackers to read arbitrary files on the server. The attack involves uploading a ZIP archive containing a shortcut (.LNK) file, then using the SITE UNZIP command to extract it on the server and accessing the file.

Directory traversal vulnerability in CitrusDB 0.3.6 and earlier allows remote and local attackers to include arbitrary PHP files via '..' sequences in the 'load' parameter in index.php.

Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.