CVE Vulnerability Catalog

A directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing "../" or "..\" sequences.

A vulnerability in zboard.php in Zeroboard versions 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code due to improper quoting when using the preg_replace function.

SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via parameters in various PHP scripts.

PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.

Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.

The template-functions-category.php file in WordPress 1.5.1 contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the $cat_ID variable, for example by using the cat parameter in a request to index.php.

Multiple SQL injection vulnerabilities in NewLife Blogger before version 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.

SQL injection vulnerability in login.asp of NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

Microsoft Terminal Server using RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, allowing remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.

SQL injection vulnerability in ad/login.asp of ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. Technical details are not yet available.

Format string vulnerability in the curses_msg function of the Ncurses interface (ec_curses.c) in Ettercap before version 0.7.3 allows remote attackers to execute arbitrary code.

SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.

SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.

A vulnerability in Sudo 1.6.8p7 on SuSE Linux 9.3 (and possibly other Linux distributions) allows a local user to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. The vendor and researchers have not been able to replicate this issue, stating that Sudo catches SIGINT and returns an empty string for the password.

Buffer overflow vulnerability in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier. A remote attacker can send a long text string, leading to arbitrary code execution.