CVE Vulnerability Catalog

The vulnerability in Opera 7.x up to version 7.54 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an integer overflow/underflow in the pack function, or (3) an integer overflow/underflow in the unpack function.

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.

Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message.

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before version 2.84 allow remote attackers to execute arbitrary SQL commands via the cat parameter in showcat.php and the product parameter in addfav.php.

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.

A vulnerability in FlatNuke 2.5.1 allows a remote attacker to inject and execute arbitrary PHP code by placing it in the url_avatar field.

A buffer overflow vulnerability in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.

Unspecified vulnerability in ASN.1 Compiler (asn1c) before version 0.9.7, occurring when processing "ANY" type tags.

Multiple buffer overflows in ArGoSoft FTP Server before version 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument.

A vulnerability in the Windows Internet Naming Service (WINS) allows a remote attacker to execute arbitrary code or cause a denial of service (server crash) by sending a specially crafted WINS packet with an improperly validated computer name. The issue results from an unchecked buffer, potentially leading to a buffer overflow.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.

Unknown vulnerability in the dotlock implementation in mailutils before version 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

SQL injection vulnerability in the sloth TCL script in QuoteEngine before version 1.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_path parameter.

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier. An attacker can remotely execute arbitrary SQL commands via the messageToUserAccNum parameter.

SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the login or password fields. This issue was later reported to also affect firmware 4.0.34.

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5, related to Java applets, have unknown impact and attack vectors, identified as (1) KSPR5YS6GR and (2) KSPR62F4D3.

Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Vulnerability in Jaws 0.3 allows remote attackers to bypass authentication by sending an HTTP request to admin.php with the 'logged' cookie set to the MD5 hash of a null password, which is compared against the 'logged' session variable in the logged_on function in application.php.