CVE Vulnerability Catalog

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.

PHP remote file inclusion vulnerability in utilit.php of Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter.

The vulnerability in hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

Unknown vulnerability in FlexCast Audio Video Streaming Server before version 2.0. Details about impact and attack vectors are unknown.

Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.

SilverCity before version 0.9.5-r1 installs scripts cgi-styler-form.py, cgi-styler.py, and source2html.py with world-readable and world-writable permissions, allowing local users to execute arbitrary code.

Buffer overflow vulnerability in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.

Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.

A vulnerability in the NFS service on Apple Mac OS X 10.4.x up to 10.4.1 causes the system to improperly obey the -network or -mask flags for a filesystem and exports it to everyone, allowing remote attackers to bypass intended access restrictions.

Vulnerability in LaunchServices on Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended restrictions.

Loki download manager 2.0 contains SQL injection vulnerabilities in the password field in default.asp and the cat parameter in catinfo.asp. A remote attacker can exploit these flaws to execute arbitrary SQL commands.

PHP remote file inclusion vulnerability in start_lobby.php of MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.

The upload.php script in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict file extensions for uploaded image files, allowing remote attackers to upload arbitrary files and execute arbitrary PHP code.

SQL injection vulnerability in login.asp of WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

A buffer overflow vulnerability in the administrative console of IBM WebSphere Application Server 5.x allows a remote attacker to execute arbitrary code when global security is enabled.

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the search_row, sort_row, order, or perpage parameter.

The sql_escape_string function in the mailutils SQL authentication module does not properly handle the backslash character (\), which is used as an escape character, making the module vulnerable to SQL injection attacks.

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password parameter. There is little public information about this product and its vendor, and the original researcher announcement is no longer available.

Multiple SQL injection vulnerabilities in Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the 'id' parameter in view.asp and print.asp, and the 'edit' parameter in register.asp.