CVE Vulnerability Catalog

SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.

An unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via crafted applets in OpenOffice documents.

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

OpenOffice.org (aka StarOffice) versions 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allow user-assisted attackers to execute malicious BASIC macros without prompting the user. Opening a crafted document triggers the exploit.

Remote file inclusion (RFI) vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the pageid parameter.

PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop. Remote attackers can execute arbitrary PHP code by supplying a malicious URL in the osCsid parameter.

Remote file inclusion (RFI) vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the ROOT_PATH parameter.

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter.

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters in php/comment.php and (2) the getpartialmatches method in php/aolbonics.php.

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS).

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter.

Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access (aka bug CSCse21391).

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files. This allows remote authenticated users to access the database (aka bug CSCsd15951).

A vulnerability in the web interface of Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on Cisco Wireless Access Point and Wireless Bridge, causes the device to reconfigure itself when the "Local User List Only (Individual Passwords)" setting is changed. This removes all security and password configurations, allowing remote attackers to access the system.

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field).

Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via a long User-Agent HTTP header in the RTSP service and unspecified vectors involving the parsing of HTTP URL schemes.

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password. This allows remote authenticated users to read, and possibly modify, sensitive configuration data.

A cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site. This link specifies a Location HTTP header that references the target site, making that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability."

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter in picture.php, mid parameter in mem.php, and sex and relationship parameters in search.php.