CVE Vulnerability Catalog

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the SLIMP3 and AgentX dissector.

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

Vulnerability in Data ONTAP 7.0 and earlier allows an attacker to bypass iSCSI authentication by using a modified client that skips the Security (Start) mode required by the Login Negotiation protocol and directly enters Operational mode without proving identity.

PHP remote file inclusion vulnerability in common.php in PunBB versions 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

A vulnerability in the docutils component in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter.

Multiple SQL injection vulnerabilities were found in ACID 0.9.6b20 and BASE 1.2 in scripts acid_qry_main.php and base_qry_main.php. Remote attackers can execute arbitrary SQL commands via the sig[1] parameter and other parameters.

Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.

Buffer overflow vulnerability in Skype for Windows versions 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via specially crafted callto:// and skype:// links or a non-standard VCARD, likely due to an error in the SysUtils.WideFmtStr Delphi routine.

Multiple stack-based buffer overflows in ZipGenius versions 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via a crafted ZIP archive with a long filename, a long original name in UUE/XXE/MIM files, or an ACE archive with a long filename.

Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via the id parameter in detail.php and the catid parameter in get.php and index.php.

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via the username parameter in the Your Account page, the url parameter in the Downloads module, and the description parameter in the Web_Links module.

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the forum_id, thread_id, link_id, artid, and dl_id parameters.

Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators.

The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code.

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file.

Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code.

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the prompt or defprompt command.

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.