CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including Admin-Center, Announcements, admin/calendar.php, and showevent.php.

IA WebMail Server 3.1.0 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long GET request.

NFS in SGI versions 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, potentially allowing attackers to bypass intended restrictions.

Multiple stack-based buffer overflows in mod_alias and mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files that can lead to denial of service or execute arbitrary code.

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, allowing local users to gain elevated privileges.

mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.

Multiple SQL injection vulnerabilities in the Portal DB components, including List of Values, Forms, Hierarchy, and XML components in Oracle9i Application Server allow remote attackers to execute arbitrary SQL commands via the URL.

CVE-2002-1570 describes a heap-based buffer overflow in the snmpnetstat driver for ucd-snmp version 4.2.3 and earlier, as well as net-snmp. Remote attackers can execute arbitrary code by sending multiple getnextrequest PDU messages with conflicting ifindex variables, causing snmpnetstat to write variable data past the end of an array.

Pan version 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.

Buffer overflow in to_ascii for PostgreSQL 7.2.x and 7.3.x before 7.3.4 allows remote attackers to execute arbitrary code.

Versions 2.1a of Croteam Serious Sam demo test 2, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 are vulnerable to denial of service attacks. Remote attackers can cause the application to crash or freeze by sending a TCP packet with an invalid first parameter.

FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).

Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.

Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.

Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Multiple PHP remote file inclusion vulnerabilities in Les Visiteurs 2.0.1, used in phpMyConferences 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.

CVE-2003-0708 describes a format string vulnerability in LinuxNode (node) before version 0.3.2 that may allow attackers to cause a denial of service or execute arbitrary code.

Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.

SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter.

Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.