CVE Vulnerability Catalog

The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with 'Requires Authentication: No' even when the user has selected the 'Require pairing for security' option, which could confuse users about which setting is valid.

A buffer overflow vulnerability in servermgrd on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to Item_Show.asp or search_list.asp.

A direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.

Parlano MindAlign 5.0 and later versions use weak encryption, which may lead to unauthorized data access. The impact and attack vectors are unknown.

Unknown vulnerability in session.php in EQdkp before version 1.3.0, possibly involving auto_login_id. Details about impact and attack vectors are unknown.

Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows attackers to gain privileges.

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.

The vulnerability in VERITAS Backup Exec and NetBackup for Windows and NetWare servers involves the use of a static password during NDMP agent authentication with the server. A remote attacker can exploit this to read and write arbitrary files with backup server privileges.

Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption.

Unknown vulnerability in the frontend authentication in PHlyMail 3.02.00. Impact and attack vectors are unknown.

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing '.php.rar' or other multiple extensions that include .php.

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.

Buffer overflow in a core application plug-in for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

MYFAQ 1.0 contains multiple SQL injection vulnerabilities in the Theme, SousTheme, Faq, and question parameters, allowing an attacker to execute arbitrary SQL commands.

Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access.

SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable.

MySQL on Windows allows authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via requests for non-library files or functions in libraries not tailored for MySQL, blocking the LoadLibraryEx function.

The ePing plugin 1.02 and earlier for e107 portal contains a vulnerability in doping.php that allows remote attackers to execute arbitrary code or overwrite files. The issue stems from improper filtering of the eping_count and eping_host parameters, which are susceptible to shell metacharacter injection.