CVE Vulnerability Catalog

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before version 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.

The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.

Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.

Unknown vulnerability in Windows File Sharing for Mac OS X versions 10.1.5 through 10.3.2 that does not 'shutdown properly'.

The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590.

Vulnerability in Macallan Mail Solution 2.8.4.6 (Build 260) and earlier versions allows a remote attacker to bypass authentication in the web interface by sending an HTTP GET request with two slashes ("//") after the server name.

Finjan SurfinGate 6.0 and 7.0 in proxy mode do not authenticate FHTTP commands on TCP port 3141, allowing remote attackers to restart the service, view log information, or force a policy update from the database server.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code by using a document with a draggable file type (e.g., .xml, .doc, .py, .cdf, .css, .pdf, .ppt) and ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to multiple ASP scripts.

SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

A buffer overflow vulnerability in BlackJumboDog 3.x FTP server allows remote attackers to execute arbitrary code by sending long FTP commands such as USER, PASS, RETR, CWD, XMKD, and XRMD.

Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.

Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.

The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp.

The Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, improperly handles files with multiple extensions such as .php.rar, allowing remote attackers to upload and execute arbitrary code.

SQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via the gameid parameter.

A buffer overflow vulnerability in the uustat utility in Sun Solaris 8 and 9 allows local users to execute arbitrary code by providing a long -S command line argument.

An unknown vulnerability in Apache 2.0.51 prevents the merging of the Satisfy directive, which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.