CVE Vulnerability Catalog

The Dell OpenManage CD launches X11 and SSH daemons that do not require authentication. This allows remote attackers to gain privileges.

The ftdi_sio driver in Linux kernel 2.6.x up to 2.6.17 allows local users to cause a denial of service by writing more data to the serial port than the hardware can handle, leading to memory exhaustion due to queued data.

A buffer overflow vulnerability in the EPUImageControl Class (EUPWALcontrol.dll) before version 1.0.3.48, used in eBay applications, allows a remote attacker to execute arbitrary code via a crafted HTML document.

A buffer overflow vulnerability exists in certain Asian language versions of Microsoft Excel. A user-assisted attacker can execute arbitrary code by enticing a user to open a crafted spreadsheet containing a malicious STYLE record, which triggers the overflow when the user attempts to repair the document or selects the "Style" option.

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components. A remote attacker can use a malicious website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download and execute an arbitrary DLL file.

Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user. Attackers can delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action.

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.

Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.

FastPatch in PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, as well as Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp. This allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers by modifying the List, Proxy, or Delete parameters.

A PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, affecting multiple templates including rwb, gwb, blues, bluwhi, and grns.

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

A vulnerability in Papyrus NASCAR Racing 4 (4.1.3.1.6 and earlier), 2002 Season (1.1.0.2 and earlier), and 2003 Season (1.2.0.1 and earlier) allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to the use of the FIONREAD asynchronous socket.

Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. This appears to be the result of an incomplete patch for CVE-2004-0982.

Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.

NewsPHP 2006 PRO contains multiple SQL injection vulnerabilities in index.php and inc/rss_feed.php. Remote attackers can inject arbitrary web script or HTML via the words, id, topmenuitem, cat_id, and category parameters.

PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter.

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including wv, abiword, freetype, gimp, libgsf, and imagemagick. The vulnerability allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file. It is uncertain whether this is a vulnerability or a feature of the product.

A stack-based buffer overflow exists in the CG_ServerCommand function of the Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03. A remote attacker can send a long command from the server, causing a denial of service and potentially executing arbitrary code.