CVE Vulnerability Catalog

The vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

The Smc.exe process in My Firewall Plus 5.0 build 1117 (and possibly other versions) does not drop privileges before invoking help, allowing local users to gain privileges.

Vulnerability in Konqueror 3.x up to version 3.2.2-6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.

The vulnerability in Netscape 7.x up to version 7.2 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.

Vulnerability in Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via a crafted ftp:// URL containing a URL-encoded newline (%0a) before the FTP command, causing command injection into the FTP session, as demonstrated with a PORT command.

A buffer overflow vulnerability in the get_file_list_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames.

Vulnerability in VIM and gVIM before version 6.3 allows local users to execute arbitrary commands by opening a file containing a crafted modeline. The attack uses options such as termcap, printdevice, titleold, filetype, syntax, backupext, keymap, patchmode, or langmenu.

SQL injection vulnerability in fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp in CMailServer 5.2 allows remote attackers to inject arbitrary SQL commands via the indexOfMail parameter, enabling deletion of email metadata or contact addresses.

The gui_popup_view_fly function in gui_tview_popup.c in junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename.

Buffer overflow vulnerability in the switch_voice function in parse.c of jcabc2ps 20040902 allows remote attackers to execute arbitrary code via a crafted ABC file.

Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions contain an SQL injection vulnerability in addentry.php. Remote attackers can execute arbitrary SQL commands via the user-agent parameter.

A buffer overflow in the find_next_file function in playlist.c of mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.

Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.

The load_elf_binary function in the binfmt_elf loader in Linux kernel 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8 does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

Vulnerability in MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning by sending an email attachment with a virus that contains an empty boundary string in the Content-Type header.

An off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Buffer overflow vulnerability in the parse_html function in o3read.c of o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW file.

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.

A buffer overflow vulnerability in the ReadFontTbl function in reader.c of rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file.

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.