CVE Vulnerability Catalog

MaxWebPortal version 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the 'news', 'lock', or 'allmem' fields in the 'start new topic' HTML page.

The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, allowing remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.

Aladdin Knowlege Systems eSafe Gateway version 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, allowing remote attackers to bypass virus protection.

DotBr version 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter in (1) exec.php3 or (2) system.php3.

DotBr 0.1 stores config.inc with insufficient access control under the web document root, allowing remote attackers to obtain sensitive information such as SQL usernames and passwords.

Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command.

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) versions 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname.

CuteNews 0.88 has a PHP remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via the cutepath parameter in shownews.php, search.php, or comments.php.

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals.

Buffer overflow in wall for HP-UX versions 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument.

Aprelium Technologies Abyss Web Server version 1.1.2, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty Connection or Range fields.

BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user. This could allow remote authenticated users to gain privileges.

The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, making it easier for remote attackers to gain privileges via brute force password guessing attacks.

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.

The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.

The SIP implementation in multiple Cisco products, including IP Phone models 7940 and 7960 and IOS versions in the 12.2 train, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

The SIP implementation in multiple dynamicsoft products, including demo products for AppEngine, allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages.

The SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.