CVE Vulnerability Catalog

A buffer overflow vulnerability in NetFtpd FTP server for NetTerm version 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking".

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

A buffer overflow vulnerability in the ncplogin utility in ncpfs before version 2.2.6 allows a remote malicious NetWare server to execute arbitrary code on the NetWare client.

SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

Vulnerability in comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain unauthorized privileges via a direct request to the file.

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.

The vulnerability in Barracuda Spam Firewall 3.1.10 and earlier allows members of whitelisted domains to send mail to any domain, enabling the device to be used as an open mail relay for spam.

A buffer overflow vulnerability in the Sentinel LM (Lservnt) service in Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.

An unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands due to missing input sanitization.

Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the language parameter to register.php, change email feature in profile.php, posts or topics parameter to moderate.php.

The vulnerability in the Solaris Management Console (SMC) GUI for Solaris 8 and 9 causes user accounts configured for password aging to be created with a blank password, allowing remote or local attackers to break into those accounts.

The custom avatar uploading feature (uploader.php) in XOOPS 2.0.9.2 and earlier does not filter file extensions, allowing remote attackers to upload arbitrary PHP scripts.

Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.

Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication.

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if 'Allow Creation of Accounts From the Web Interface' is disabled, via a direct HTTP POST request.

Buffer overflow in command.C in rxvt-unicode before version 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences.

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands.

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.

Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.