CVE Vulnerability Catalog

Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but 'critical' impact.

A vulnerability in JunkBuster before version 2.0.2-r3 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via heap corruption during URL filtering.

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the mode or search parameters.

Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.

Buffer overflow vulnerability in Computer Associates (CA) License Client version 0.1.0.15. A remote attacker can send a specially crafted PUTOLF request with a long filename, leading to arbitrary code execution.

A format string vulnerability in the log_do function in log.c in YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.

The vulnerability in inc_login_check.asp in ACS Blog versions 0.8 through 1.1.3 allows remote attackers to gain administrator privileges by manipulating the 'in' value in a cookie.

Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.

SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the crn parameter in a show action or rn parameter in a show_detail action.

Multiple SQL injection vulnerabilities were found in Valdersoft Shopping Cart 3.0. An attacker can remotely execute arbitrary SQL commands by manipulating parameters in various PHP scripts.

SQL injection vulnerability in PHP scripts of phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands via the person parameter in people.php or the Login field.

A buffer overflow vulnerability in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows a local user to gain privileges via a specially crafted application.

A buffer overflow vulnerability in NetFtpd FTP server for NetTerm version 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.

A buffer overflow in the administration web server of GoodTech Telnet Server versions 4.0 and 5.0 (and possibly all versions before 5.0.7) allows remote attackers to execute arbitrary code via a long string sent to port 2380.

SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.

Buffer overflow vulnerability in the IMAP daemon (IMAP4d32.exe) in Ipswitch Collaboration Suite (ICS) before version 8.15 Hotfix 1. A remote authenticated user can execute arbitrary code by sending a long EXAMINE command.

A memory leak in Secure Shell (SSH) in Cisco IOS versions 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

Buffer overflow vulnerability in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.

Gigafast router (also known as CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext.