CVE Vulnerability Catalog

Vulnerability in Kerio Personal Firewall 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.

The DSS verification code in Dropbear SSH Server before version 0.43 frees uninitialized variables, which might allow remote attackers to gain access.

An unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP versions 6 and 7 on HP-UX in trusted mode allows attackers to bypass authentication and gain administrator rights.

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Editing Component (DEC) and Javascript that calls showModalDialog.

Unknown vulnerability in ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication.

Vulnerability in Axis Network Camera version 2.40 and earlier, and Video Server version 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to CGI scripts, modify system settings, or cause a denial of service (reboot) of the device.

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) versions 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the 'table' and 'field' parameters in LinkClick.aspx.

Unspecified vulnerability in Kerio MailServer before version 6.0.3, related to a potential security issue, with unknown impact and unknown remote attack vectors.

Vulnerability in hfaxd in HylaFAX before version 4.2.1, when installed with a weak hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted username or hostname that satisfies a regular expression matched against a hosts.hfaxd entry without a password.

Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before version 1.7-BETA were found. Vulnerabilities exist in the qmail_parseline and sendmail_parseline functions in parser.c, loadconfig and removespaces functions in loadconfig.c, and possibly unspecified functions in functions.c, allowing remote attackers to execute arbitrary code.

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the user id, recipe id, category id, and other ID number fields.

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via various functions in Parser.c, Dir.c, loadconfig.c, LangCfg.c, and Html.c.

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

The vulnerability allows remote execution of PHP code by injecting an external URL into the appdir parameter in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier.

Omnicron OmniHTTPd version 3.0a and earlier contains a buffer overflow vulnerability in the handling of the Range header in HTTP GET requests. A remote attacker can exploit this to execute arbitrary code on the server.

SQL injection vulnerability in the Reviews module of PHP-Nuke versions 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter.

SQL injection vulnerability in Interchange before version 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

The vulnerability in Java 2 Micro Edition (J2ME) stems from improper bytecode validation, allowing a remote attacker to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.