CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter.

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the 'id' argument to admin pages such as 'members' or 'admin'.

Stack-based buffer overflow in Ares FileShare 1.1 allows remote or local attackers to execute arbitrary code via a long history parameter in the configuration file (ares.conf) or a long search string.

Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.

A format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.

Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

PHP Surveyor 0.98 contains multiple SQL injection vulnerabilities in the sid, start, id, and lid parameters across various scripts. They allow a remote attacker to execute arbitrary SQL commands.

A buffer overflow vulnerability in the UNACEV2.DLL library used by avast! Antivirus allows a remote attacker to execute arbitrary code via a crafted ACE archive with a long filename.

A buffer overflow vulnerability in a USB driver for Microsoft Windows allows attackers to execute arbitrary code.

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via a specially crafted RCPT TO command with a long DNS name or a large number of RCPT TO commands with a long email name argument in the last command.

SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.php, (3) conditions.php, or (4) spss.php.

The inc.login.php script in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.

Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the Telnet or web administration interfaces.

Vulnerability in Oracle Forms from version 4.5 to 10g allows executing form executables from arbitrary directories as the Oracle or System user. An attacker can upload a malicious .fmx file and invoke it by providing an absolute path in the form or module parameters to the f90servlet.

A buffer overflow vulnerability in SlimFTPd versions 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name in LIST, DELE, or RNFR commands.

The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.

Multiple integer overflows in the libgadu library, used in Kopete (KDE 3.2.3–3.4.1), ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted incoming message.