CVE Vulnerability Catalog

Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.

SQL injection vulnerability in index.php of CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.

In certain OpenBSD versions, PF (Packet Filter) with stateful filtering enabled does not restrict packets for a session to the original interface, allowing remote attackers to bypass intended packet filters via spoofed packets to other interfaces.

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the img, cat, sort_key, order_key, user, or album parameters.

Unspecified vulnerability in MadBMS before version 1.1.5, related to logins, has unknown impact and attack vectors.

Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.

Unspecified vulnerability in Jetty HTTP Server, as used in IBM Trading Partner Interchange before 4.2.4 and CA Unicenter Web Services Distributed Management (WSDM) before 3.11, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter in index.php or members.php, or the comment_id parameter in comments.php.

An unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise version 4.01 and earlier allows remote attackers to cause a denial of service (DoS) via unknown attack vectors when a web site is improperly accessed.

PHP remote file inclusion vulnerability in livre_include.php of @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.

Unknown vulnerability in the 'access code' in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.

Multiple buffer overflows in Gyach Enhanced (Gyach-E) before version 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to avatar retrieval.

SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.

Unknown vulnerability in RemoteEditor before version 0.1.1, related to oversize submissions, has unknown impact and attack vectors.

A vulnerability in Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php. The affected version was reported to be 4.3.7, but this may be erroneous.

SQL injection vulnerability in Ideal Science IdealBB versions 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

An unknown vulnerability in Veritas Cluster Server versions 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.