CVE Vulnerability Catalog

Complete PHP Counter contains an SQL injection vulnerability in list.php. Remote attackers can execute arbitrary SQL commands via the c or s parameters.

SQL injection vulnerability in the Additional Images module for osCommerce before version 1.14. Remote attackers can execute arbitrary SQL commands via the products_id parameter in product_info.php.

An unspecified vulnerability in mroovca stats (mroovcastats) before version 0.4.5b related to cookies. Attackers can exploit unknown attack vectors, leading to an unspecified impact on the system.

SQL injection vulnerability in index.php of ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. The details are obtained solely from third party information as the original source is unavailable.

Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause a denial of service (crash) via the rlm_sqlcounter module or while expanding the %t token.

BEA WebLogic Server and WebLogic Express versions 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack vectors.

Buffer overflow vulnerability in BlueCoat WinProxy before version 6.1a and in the web console access functionality of ProxyAV before version 2.4.2.3. A remote attacker can exploit a long Host: header to execute arbitrary code.

A format string vulnerability in the vmps_log function in OpenVMPS 1.3 allows remote attackers to execute arbitrary code via unknown vectors.

SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1. Remote attackers can execute arbitrary SQL commands via the file extension of an uploaded file attachment.

SQL injection vulnerability in index.php of 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter.

A buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via an m3u file containing a long line ending in .wma or a pls file containing a long File1 value ending in .wma.

Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before version 9.2.0, used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via specially crafted UUE, ZIP, TAR files or emails with long links.

SQL injection vulnerability in search.php of Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter.

A vulnerability in the Xpdf library, used in many products (e.g., gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor), allows an attacker to cause an infinite loop (denial of service) by providing streams that end prematurely, such as CCITTFaxDecode or DCTDecode. This issue is known as 'Infinite CPU spins'.

A heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words longer than the input buffer used by flex.

PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled. Attackers can execute arbitrary code via URL in FORUM[LIB] or root_dir parameters.

SQL injection vulnerability in index.php of phpoutsourcing Zorum Forum 3.5 and earlier. Remote attackers can execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.

Vulnerability in Xpdf library (Stream.cc) allows attackers to modify memory and potentially execute arbitrary code via specially crafted DCTDecode streams. The issue involves missing validation of values such as 'number of components', 'Huffman table index', and 'scanInfo.numComps' in functions DCTStream::readBaselineSOF, DCTStream::readProgressiveSOF, DCTStream::readHuffmanTables, and DCTStream::readScanInfo.

Drivers for certain display adapters, including an unspecified ATI driver and an unspecified Intel driver, may allow a remote attacker to cause a denial of service (system crash) via a large JPEG image. The attack was demonstrated in Internet Explorer using an image with dimensions of 9999999 pixels.

The vulnerability in Blue Coat Systems WinProxy before version 6.1a allows a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code by sending a large number of packets containing 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.