CVE Vulnerability Catalog

Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges.

Vulnerability in sysreport version 1.3.15 and earlier causes the contents of the up2date file to be included in a report, leaking the proxy server password in plaintext. A local user can exploit this information to gain elevated privileges.

Vulnerability in mtnpeak.net File Upload Manager allows unauthorized attackers to read and delete arbitrary files on the server. Lack of proper authentication checks for 'view' and 'del' actions enables manipulation of a base64-encoded file parameter.

The jammail.pl script in JamMail 1.8 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the mail parameter.

Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request.

A vulnerability in Cisco switches supporting 802.1x security allows a remote attacker to bypass port security and gain access to the VLAN by sending spoofed Cisco Discovery Protocol (CDP) messages.

The eTrace_validaddr function in the eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter.

Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.

Vulnerability in I-Man 0.9 and earlier versions allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter in cal_week.php, cal_cat.php, cal_day.php, and the id parameter in cal_pophols.php.

The vulnerability in Symantec Brightmail AntiSpam before version 6.0.2 involves a hard-coded database administrator password. A remote attacker can exploit this flaw to gain unauthorized privileges.

PHP remote file inclusion vulnerability in utilit.php of Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter.

A vulnerability in Perception LiteWeb allows remote attackers to bypass access controls for files by adding an extra leading slash (/) or backslash (\) in the URL.

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.

The vulnerability in hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

Unknown vulnerability in FlexCast Audio Video Streaming Server before version 2.0. Details about impact and attack vectors are unknown.

A direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.

PHP remote file inclusion vulnerability in last_gallery.php of YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo.

Vulnerability in Sawmill before version 7.1.6 allows a remote attacker to bypass authentication and gain administrative privileges or add a license.