CVE Vulnerability Catalog

Vulnerability in ISQL*Plus component of Oracle 10g Application Server allows remote attackers to execute arbitrary files by providing an absolute pathname in the file parameter of the load.uix script.

Buffer overflow vulnerability in extproc component in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.

Vulnerability in dbsnmp and nmo programs in Oracle 8i, 9i, and Oracle IAS 9.0.2.0.1 on Unix systems uses a default path to find and execute library files while operating at raised privileges, allowing certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

Vulnerability in WpQuiz versions 2.60b1 through 2.60b8 allows remote attackers to gain elevated privileges by directly requesting the adminrestore.php file in the extras directory.

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the linpha_userid or linpha_password cookies.

SQL injection vulnerability in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL queries and bypass authentication via the user, password, or crypted_password parameters.

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allow remote attackers to use the show.pl script as an open proxy or read arbitrary local files by setting the url parameter to a http://, ftp://, or file:// URL.

Multiple cross-site scripting vulnerabilities were found in the Search module of Php-Nuke in index.php. A remote attacker can inject arbitrary web script or HTML via the sid, max, sel1-5, match, mod1-3 parameters.

SQL injection vulnerability in the Search module of Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter in index.php.

Vulnerability in Opera 7.51 for Windows and 7.50 for Linux allows a frame from one domain to inject content into a frame belonging to another domain. This issue can be exploited for website spoofing and other attacks.

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.

A vulnerability in Microsoft Internet Explorer 6.0.2800.1106 on Windows XP SP2 and versions 5.01 and 5.5 allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name. Known as the 'Similar Method Name Redirection Cross Domain Vulnerability'.

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

An unknown vulnerability in the administrative controls of Bugzilla versions 2.17.1 through 2.17.7 allows users with 'grant membership' privileges to grant memberships to groups they do not control.

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.