CVE Vulnerability Catalog

Unknown vulnerability in Webmin and Usermin before version 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact.

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands via the search engine, the username or email fields in the "forgotten password" feature, or the domain name in a package order.

Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.

Vulnerability in the SimpleXMLRPCServer module in Python 2.2, 2.3 before 2.3.5, and 2.4 allows remote attackers to read or modify module globals and potentially execute arbitrary code when an XML-RPC server uses register_instance without a _dispatch method.

SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.

The License Logging service in Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate message length, leading to an unchecked buffer. A remote attacker can exploit this to cause a denial of service (crash) and potentially execute arbitrary code.

Buffer overflow vulnerability in the Decrypt::makeFileKey2 function in xpdf version 3.00 and earlier allows remote attackers to execute arbitrary code via a specially crafted PDF file with a large /Encrypt /Length keyLength value.

Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.

PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script version 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. It was later reported that version 2.4 is also affected.

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

The vulnerability in the TCP design involves the lack of checking whether the TCP sequence number in an ICMP error message falls within the range of sequence numbers for sent but unacknowledged data. This allows attackers to forge ICMP messages for specific TCP connections, leading to denial-of-service (DoS) attacks via connection resets, throughput reduction, or Path MTU reduction.

The vulnerability in ncpfs before version 2.2.6 is that the nwclient.c file does not drop root privileges before executing utilities using the NetWare client functions. This allows local users to escalate their privileges.

Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.

A format string vulnerability in bidwatcher before version 1.3.17 allows remote malicious web servers from eBay or a spoofed eBay server to cause a denial of service and possibly execute arbitrary code via certain responses.

Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the mode or search parameters.

Multiple SQL injection vulnerabilities in mod.php of phpCOIN versions 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via parameters such as faq_id, id, topic_id, ord_id, dom_id, or invd_id in various modules.

SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.

Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.

A buffer overflow vulnerability in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.