CVE Vulnerability Catalog

A vulnerability in WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via decoding large RLE images.

A stack-based buffer overflow exists in the bootpd service within the DHCP component of Apple Mac OS X 10.3.9 and 10.4.7. A remote attacker can execute arbitrary code by sending a crafted BOOTP request.

Banex PHP MySQL Banner Exchange 2.21 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via the site_name parameter in signup.php and the id, deleteuserbanner, viewmem, viewmemunb, viewunmem, and deleteuser parameters in admin.php.

A PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code by supplying a URL in the cfg_root parameter.

PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package used by MyNewsGroups :) 0.6b and earlier. A remote attacker can execute arbitrary PHP code by supplying a URL in the myng_root parameter.

Remote file inclusion (RFI) vulnerability in MamboXChange Moskool 1.5 component for Mambo. An unauthenticated attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in the bayesiannaivefilter component 1.1 for Mambo. An attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in payment.php in BosDev BosDates. An attacker can supply a malicious URL via the insPath parameter, leading to arbitrary PHP code execution on the server.

A stack-based buffer overflow exists in EFS Software Easy File Sharing FTP Server 2.0. A remote attacker can send a long argument to the PASS command to execute arbitrary code. The provenance of this information is unknown and details come from third-party sources.

MiniBB Forum 1.5a contains multiple PHP remote file inclusion vulnerabilities. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the absolute_path parameter to news.php, search.php, or whosOnline.php.

SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably version 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. The provenance of this information is unknown; details are obtained from third party information.

A vulnerability in WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML. The issue involves a memory management error in WebKit, possibly a buffer overflow, originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using JavaScript that changes document.body.innerHTML within a DIV tag.

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message containing a string without null character termination, leading to a NULL dereference in the ExecuteTransaction function. The vulnerability is known as "Mailslot DOS", although the name is misleading and unrelated to mailslots.

Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and 6.0 allows local users to cause a denial of service (grid service shutdown) and possibly execute arbitrary code using buffer overflows via unknown vectors that cause (1) qmaster or (2) execd to terminate.