CVE Vulnerability Catalog

ImageMagick version 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability.

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.

Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via long FTP banners or long responses to client commands such as USER, PASS, ACCT, and possibly other commands.

CVE-2003-0585 describes an SQL injection vulnerability in the login.asp file of Brooky eStore versions 1.0.1 through 1.0.2b. It allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.

mgetty versions 1.1.28 and earlier have a vulnerability that does not properly filter non-printable characters and quotes, allowing remote attackers to execute arbitrary commands via shell metacharacters in caller ID or caller name strings.

The admin.php file in Digi-news 1.1 contains a vulnerability that allows remote attackers to bypass authentication by using a cookie with the username set to the administrator's name. The condition in admin.php does not require a correct password, enabling access to the admin panel.

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.

Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.

Cisco IOS versions 11.x and 12.0 through 12.2 allow remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

An unknown vulnerability in SGI IRIX versions 6.5.x through 6.5.20, and possibly earlier, allows local users to cause a core dump in scheme and potentially gain privileges via certain environment variables.

Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.

The mailcap file for mozart 1.2.5 and earlier allows Oz applications to be passed to the Oz interpreter, enabling remote attackers to execute arbitrary Oz programs in a MIME-aware client program.

Buffer overflow in the Client Detection Tool (cdt.dll) plugin for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.

Brooky eStore versions 1.0.1 through 1.0.2b allow remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.

SQL injection vulnerabilities in the PostgreSQL and MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.

The admin.php file in Digi-ads 1.1 has a vulnerability that allows remote attackers to bypass authentication by using a cookie with the username set to the administrator's name. The condition in admin.php does not require a correct password.

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message.

Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.