CVE Vulnerability Catalog

An unspecified vulnerability in Java 1.3.1 before version 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain elevated privileges. The issue is related to Mac OS X specific extensions.

SQL injection vulnerability in post.php of PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.

The FTP component in FortiGate devices running FortiOS 2.8MR10, v3beta, and versions prior to 3.0 MR1 allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.

SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter.

A vulnerability in the PEAR Text_Password 1.0 library stems from improper seeding of the random number generator, potentially leading to predictable password generation. The exact impact and attack vectors are unspecified.

Interpretation conflict in Fortinet FortiGate 2.8 running FortiOS 2.8MR10 and v3beta allows remote attackers to bypass the URL blocker via an HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or an HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.

BEA WebLogic Server and WebLogic Express versions 8.1 SP3 and earlier, and 7.0 SP5 and earlier, improperly constrain a slash (/) servlet root URL pattern. This could allow a remote attacker to bypass intended servlet protections.

A vulnerability in BEA WebLogic Server and WebLogic Express causes the boot password to be stored in cleartext in the registry. A local user can read it and gain unauthorized administrative access.

A vulnerability in BEA WebLogic Server and WebLogic Express may inadvertently expose passwords in IIOP exception messages. When IIOP is used, a password can be included in an error message sent to a client or stored in a log file.

Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 may allow context-dependent attackers to execute arbitrary code via long function parameters, as demonstrated in cups_get_dest_options.

SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php.

In IBM DB2 8.1, shared memory sections and events have default read and write permissions for the Everyone group, allowing local users to gain unauthorized access, obtain sensitive information such as cleartext passwords, and cause a denial of service.

A stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.

A stack-based buffer overflow in db2fmp in IBM DB2 versions 7.x and 8.1 allows local users to execute arbitrary code via a long parameter.

A vulnerability in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.

A vulnerability in hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, allowing remote attackers to gain unauthorized privileges.

The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename processed by the display command.

Integer overflow in Apple QuickTime before 7.0.4 allows remote attackers to execute arbitrary code via a specially crafted TIFF image file with modified image height and width (ImageWidth) tags.

Integer underflow in Apple QuickTime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file.

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before version 2.0.3, used for user authentication against a PostgreSQL database, allow remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.