CVE Vulnerability Catalog

In GOCR 0.40, a heap-based buffer overflow in the readpgm function in pnm.c allows remote attackers to execute arbitrary code via a specially crafted P3 format PNM file containing more data than implied by its width and height values.

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.

A buffer underflow vulnerability in extfs.c of Midnight Commander (mc) version 4.5.55 and earlier allows remote attackers to cause a denial of service and potentially execute arbitrary code.

Opera 8 Beta 3 displays the Organizational information of an SSL certificate when using first-generation vetted digital certificates, which is easily spoofed and can facilitate phishing attacks.

Vulnerability in Perl scripts of Konversation 0.15 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters in channel names or song names that are not properly quoted when running IRC scripts.

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.

Vulnerability in fish.c of Midnight Commander allows remote attackers to execute arbitrary programs via insecure filename quoting, possibly using shell metacharacters.

A buffer overflow vulnerability in playmidi before version 2.4 allows local users to execute arbitrary code.

Multiple buffer overflows in Midnight Commander (mc) version 4.5.55 and earlier allow remote attackers to have an unknown impact.

Buffer overflow vulnerability in the exported_display function in xatitv in gatos before version 0.0.5 allows local users to execute arbitrary code.

Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.

Format string vulnerability in cgi.c of Monkey daemon (monkeyd) before version 0.9.1. A remote attacker can cause a denial of service and potentially execute arbitrary code by sending an HTTP GET request containing double-encoded format string specifiers (also known as 'double expansion error').

SQL injection vulnerability in admin/login.asp in ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the username or password parameters.

SQL injection vulnerability in exit.php in Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the url_id or entry_id parameters.

SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.

A buffer overflow vulnerability in the Content Advisor feature of Microsoft Internet Explorer 5.01, 5.5, and 6 allows a remote attacker to execute arbitrary code via a crafted Content Advisor file, also known as the 'Content Advisor Memory Corruption Vulnerability'.

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.

Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to overwrite arbitrary files, replace packages to execute arbitrary code, or create arbitrary zero-byte files.