CVE Vulnerability Catalog

A buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request.

SQL injection vulnerability in VP-ASP Shopping Cart versions 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the Processed0 and Processed1 parameters in a POST request to shopproductselect.asp.

Buffer overflow vulnerability in the sh_hash_compdata function in Samhain versions 1.8.9 through 2.0.1, when running in update mode ("-t update"), may allow attackers to execute arbitrary code.

An unknown security vulnerability was discovered in phpGroupWare before version 0.9.14.002 in the Setup/Config functionality. This vulnerability may be exploited via unknown attack vectors and lead to unspecified impacts.

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter in index.php or members.php, or the comment_id parameter in comments.php.

Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.

The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.

A vulnerability in Novell Client Firewall (NCF) 2.0, based on Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with elevated privileges.

Vulnerability in DokuWiki before October 19, 2004 allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as .php or .cgi when the web server permits execution based on file extension.

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 allows remote attackers to execute arbitrary code via an HTML message with long tag text.

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.

Trend OfficeScan Corporate Edition 5.58 and possibly earlier does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the user id, recipe id, category id, and other ID number fields.

The vulnerability in passwd version 0.68 is due to not checking the return code of the pam_start function. This may lead to unknown impacts and attacks that disrupt the safe and proper operation of PAM.

Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart versions 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in shopreviewlist.asp and shopreviewadd.asp.

Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via various functions in Parser.c, Dir.c, loadconfig.c, LangCfg.c, and Html.c.

The password generation in Mailman before version 2.1.5 generates only 5 million unique passwords, making it easier for remote attackers to guess passwords via a brute force attack.

A CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a crafted link or IMG tag to YaBB.pl with specified action, id, and moda parameters.

An unknown overflow in the phpgw_config table in phpGroupWare before version 0.9.14.002. An attacker could exploit this vulnerability, but the exact attack vectors and impact are unknown.