CVE Vulnerability Catalog

Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.

Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allow remote attackers to execute arbitrary code via (1) a long DNS hostname determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.

Snitz Forums 2000 versions 3.3.03 and earlier have a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts as other Forums 2000 users via Javascript in an IMG tag.

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.

BadBlue before version 1.6.1 beta has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts and possibly additional commands via a URL containing JavaScript.

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext.

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long service argument.

Buffer overflow in Sun AnswerBook2 versions 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.

The codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts and steal cookies via JavaScript in the IMG tag.

XChat versions 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allow remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING.

The XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.

Version 3.3.03 and earlier of Snitz Forums 2000 contains a SQL injection vulnerability in members.asp, allowing remote attackers to execute arbitrary code.

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login.

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.

Cross-site scripting (XSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary scripts and steal cookies from other IcrediBB users via the (1) title or (2) body of posts.

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

A format string vulnerability in the libnspd.a library in AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.