CVE Vulnerability Catalog

An unknown vulnerability in Apache 2.0.51 prevents the merging of the Satisfy directive, which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.

A buffer overflow vulnerability in the uustat utility in Sun Solaris 8 and 9 allows local users to execute arbitrary code by providing a long -S command line argument.

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.

A stack-based buffer overflow vulnerability in the swnet.dll library in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code by sending a long message parameter in a SendMsg action to action.htm.

Buffer overflow vulnerability in the KSDWRTB function of the dbms_system package in Oracle Database 9i and 8i. A remote authorized user can exploit a long second argument to execute arbitrary code on the database server.

A format string vulnerability in the log routine of gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.

SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot) sequence.

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL.

A vulnerability in the radmin software in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows remote access via port 25072 using the default password 'jstwo'.

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing.

The SSL HTTP Server in HP Web-enabled Management Software versions 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise trusted certificates by uploading their own certificates.

Finjan SurfinGate 6.0 and 7.0 in proxy mode do not authenticate FHTTP commands on TCP port 3141, allowing remote attackers to restart the service, view log information, or force a policy update from the database server.

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to multiple ASP scripts.

CSRF vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.

Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.