CVE Vulnerability Catalog

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.

Multiple SQL injection vulnerabilities exist in PHP-Nuke 7.8 in modules.php via the name, sid, and pid parameters in POST requests when magic_quotes_gpc is disabled. Attackers can bypass GET request security checks and execute arbitrary SQL commands.

An unspecified vulnerability in Java 1.3.1 before version 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain elevated privileges. The issue is related to Mac OS X specific extensions.

SQL injection vulnerability in post.php of PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.

SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter.

A vulnerability in the PEAR Text_Password 1.0 library stems from improper seeding of the random number generator, potentially leading to predictable password generation. The exact impact and attack vectors are unspecified.

BEA WebLogic Server and WebLogic Express versions 8.1 SP3 and earlier, and 7.0 SP5 and earlier, improperly constrain a slash (/) servlet root URL pattern. This could allow a remote attacker to bypass intended servlet protections.

A vulnerability in BEA WebLogic Server and WebLogic Express causes the boot password to be stored in cleartext in the registry. A local user can read it and gain unauthorized administrative access.

SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php.

Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, NetBSD-2 before 20050913, and NetBSD-1.6 before 20050914. Local users can cause heap corruption, system crash, and potentially gain root privileges.

Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before September 30, 2005 allow attackers to execute arbitrary commands, disable services, and exploit other vulnerabilities.

A buffer overflow vulnerability in the mod_radius module of ProFTPD before version 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code by sending a long password.

A format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before version 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code by injecting format strings into the wprintw function.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including the m parameter in auth.php, the f parameter in events.php, or the e parameter in plug.php.

SQL injection vulnerability in project-edit.asp of Digger Solutions Intranet Open Source (IOS) version 2.7.2. Attackers can execute arbitrary SQL commands via the project_id parameter.

A buffer overflow vulnerability in HP HTTP Server versions 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.

A remote file inclusion vulnerability in Siteframe before version 3.2.2 allows remote attackers to execute arbitrary PHP code by supplying a malicious URL in the LOCAL_PATH parameter in web/classes.php.

Internet Explorer 6.0 (and possibly other versions) allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name). Some proxy servers convert tabs to spaces, enabling the attack.

SQL injection vulnerability in Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the SYS.DBMS_CDC_SUBSCRIBE and SYS.DBMS_CDC_ISUBSCRIBE packages.

The ath_rate_sample function in the sample code of MadWifi before version 0.9.3 allows remote attackers to cause a denial of service (system crash due to failed KASSERT) by moving a connected system to a location with low signal strength, and possibly other vectors related to a race condition between interface enabling and packet transmission.