CVE Vulnerability Catalog

Trend OfficeScan Corporate Edition 5.58 and possibly earlier does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.

The vulnerability in passwd version 0.68 is due to not checking the return code of the pam_start function. This may lead to unknown impacts and attacks that disrupt the safe and proper operation of PAM.

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.

Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.

Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart versions 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in shopreviewlist.asp and shopreviewadd.asp.

The vulnerability in Ansel 1.2 through 2.0 is due to insecure default permissions, allowing remote attackers to gain access to web readable directories.

The password generation in Mailman before version 2.1.5 generates only 5 million unique passwords, making it easier for remote attackers to guess passwords via a brute force attack.

The SSL HTTP Server in HP Web-enabled Management Software versions 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise trusted certificates by uploading their own certificates.

Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

A stack-based buffer overflow vulnerability in the swnet.dll library in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code by sending a long message parameter in a SendMsg action to action.htm.

A CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a crafted link or IMG tag to YaBB.pl with specified action, id, and moda parameters.

The vulnerability allows remote execution of PHP code by injecting an external URL into the appdir parameter in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier.

SQL injection vulnerability in Interchange before version 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

An unknown overflow in the phpgw_config table in phpGroupWare before version 0.9.14.002. An attacker could exploit this vulnerability, but the exact attack vectors and impact are unknown.

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.

The vulnerability in kdocker 0.1-0.8 is due to improper file ownership checking in kdocker.cpp. A local user could exploit this to execute arbitrary programs.

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the FID parameter in board.php, sortorder/perpage/id parameters in member.php, forums parameter in search.php, and PID/FID parameters in post.php.

PHP remote file inclusion vulnerability in index.php of ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script.