CVE Vulnerability Catalog

A cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site. This link specifies a Location HTTP header that references the target site, making that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability."

Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via a long User-Agent HTTP header in the RTSP service and unspecified vectors involving the parsing of HTTP URL schemes.

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password. This allows remote authenticated users to read, and possibly modify, sensitive configuration data.

SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter.

Stack-based buffer overflow in the libmms library, as used by MiMMS 0.0.9 and xine-lib 1.1.0 and earlier. A remote attacker can cause a denial of service (application crash) and possibly execute arbitrary code via the send_command, string_utf16, get_data, and get_media_packet functions.

SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter.

SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter.

A stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 through 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.

A format string vulnerability in the CF_syslog function in launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

The Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier contains a SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the title parameter.

SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.

A vulnerability in the Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results. This might allow remote attackers to obtain sensitive information.

A format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.

SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

A buffer overflow vulnerability in the Online Registration Facility of Algorithmic Research PrivateWire VPN software up to version 3.7 allows remote attackers to execute arbitrary code by sending a long GET request.

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.

FineShop 3.0 and earlier contains multiple SQL injection vulnerabilities in index.php. Remote attackers can execute arbitrary SQL commands via the produkt, id_produc, and id_kat parameters.

A SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier was reported to allow remote attackers to execute arbitrary SQL commands via the page parameter. The vendor disputed this report, stating that using a non-positive or non-integer value for the page parameter causes the search query to use a negative number in the LIMIT clause, breaking the query and showing no results, but it is not a SQL injection error.