CVE Vulnerability Catalog

SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the 'id' parameter in a view operation.

A buffer overflow vulnerability in MailCarrier 2.51 occurs when handling EHLO and possibly HELO commands. A remote attacker can exploit this to execute arbitrary code on the server.

A directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.

SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.

Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.

The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.

Vulnerability in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 allows remote attackers to delete or move arbitrary files on the server via the originalfolder and messageid parameters in viewaction.html.

Vulnerability in attachment.html of Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.

Vulnerability in accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 (and possibly other versions) allows remote attackers to create text files with arbitrary content via the accountid parameter.

Buffer overflow in digestmd5.c (CVS release 1.170) of the DIGEST-MD5 SASL plugin for Cyrus-SASL, not included in any official releases, allows remote attackers to execute arbitrary code.

A format string vulnerability in the SetBaseURL function in the AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.

A stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

IBM DB2 versions 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries used in setuid root programs.

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.

Clearswift MAILsweeper before version 4.3.15 does not properly detect and filter RAR 3.20 encoded files, allowing remote attackers to bypass intended security policies.

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, allowing remote attackers to bypass intended policy.

Buffer overflow in the JPEG parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

A vulnerability in mah-jong before version 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.

Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, allowing remote attackers to bypass intended policy.