CVE Vulnerability Catalog

The vulnerability in init.php of WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.

An unknown vulnerability in Serviceguard and Cluster Object Manager on HP-UX and HP Linux allows remote attackers to gain unauthorized privileges via unknown attack vectors.

Buffer overflow vulnerability in the TFTP client in InetUtils 1.4.2. A remote malicious DNS server can exploit this flaw to execute arbitrary code by sending a large DNS response processed by the gethostbyname function.

The vulnerability allows remote execution of PHP code by injecting an external URL into the appdir parameter in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier.

SQL injection vulnerability in Interchange before version 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

The vulnerability in Java 2 Micro Edition (J2ME) stems from improper bytecode validation, allowing a remote attacker to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.

Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and development branch before 1.3.5. The flaw allows write access to specific proc entries from a vserver context, potentially leading to unspecified impacts.

The vulnerability in PeerSec MatrixSSL before version 1.1 caches session keys for an indefinitely long time, making it easier for remote attackers to hijack a session.

Multiple vulnerabilities were found in the H.323 protocol implementation in First Virtual Communications products (Click to Meet Express, Premier, Conference Server, and V-Gate). A remote attacker can exploit these flaws to cause a denial of service (DoS), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

An ActiveX control in McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages using the control's RegQueryValue() method.

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.

Unspecified vulnerability in ASN.1 Compiler (asn1c) before version 0.9.7, occurring when processing "CHOICE" types with "indefinite length structures." Impact and attack vectors are unknown.

Unspecified vulnerability in ArGoSoft FTP server before version 1.4.2.2 allows attackers to upload .lnk files via unknown vectors.

The vulnerability in the IBM Access Support eGatherer ActiveX control version 2.0.0.16 allows a remote attacker to create files with arbitrary content using the SetDebugging and RunEgatherer methods. For example, an attacker can create a .hta file in the Startup folder, leading to automatic execution of malicious code at system startup.

SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin versions 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter.

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.

The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before version 2.0 does not drop privileges when using the help functionality, allowing local users to gain privileges.

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the clientRcptTo array, and the Received and messageID variables, possibly involving HELO and hostname arguments.

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.