CVE Vulnerability Catalog

Buffer overflow in queue.c and queued.c in queue before version 1.30.1 may allow remote attackers to execute arbitrary code.

A buffer overflow vulnerability in the strip_html_tags method in Gyach Enhanced (Gyach-E) before version 1.0.4 allows remote attackers to cause a denial of service and potentially execute arbitrary code via unknown vectors involving HTML tags.

Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allows remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka 'Potential Credential Impersonation Attack.'

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors.

Multiple unspecified vulnerabilities were found in Gyach Enhanced (Gyach-E) before version 1.0.5, likely related to buffer overflows in HTTP server responses. Their impact and attack vectors are not precisely known.

A buffer overflow vulnerability in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows a remote attacker to execute arbitrary code by sending a long command string or a long string to the MEIMAP service and then terminating the connection.

Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp.

The vulnerability in HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed is due to insecure directory permissions on /opt/gnome/src/GLib/. A local user can exploit this to gain elevated privileges by placing files in this directory.

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.

The vulnerability in BNC 2.9.0 allows remote attackers to access functions intended for authorized users because the system grants access even after an incorrect password is provided.

The vulnerability in Tomcat before version 5.0.27-r3 on Gentoo Linux sets default permissions on init scripts to tomcat:tomcat, but executes them with root privileges, allowing local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

SQL injection vulnerability in include.php in PHPKIT versions 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.

The web interface of the Micronet Wireless Broadband Router SP916BM running firmware before version 1.9 dated 08/04/2004 resets the password to the default when the router is powered off, which could allow remote attackers to gain access.

PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the t_core_path parameter to bug_api.php or t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code.

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.

Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via the username field on the login page or the eventid parameter to calendar.asp.

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to execute arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp, or (4) txtUserEmail parameter to forgot.asp.

PHP remote file inclusion vulnerability in index.php of GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 'doc' parameter to reference a URL on a remote web server containing the code.