CVE Vulnerability Catalog

The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before version 2.0 does not drop privileges when using the help functionality, allowing local users to gain privileges.

Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the clientRcptTo array, and the Received and messageID variables, possibly involving HELO and hostname arguments.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code by using a document with a draggable file type (e.g., .xml, .doc, .py, .cdf, .css, .pdf, .ppt) and ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the thread_id, parent_id, or mode parameters.

Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow remote attackers to execute arbitrary code via an SSH2 packet with a base argument larger than the mod argument, and malicious servers to cause a denial of service or possibly execute arbitrary code via a large bignum during authentication.

Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.

SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin versions 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter.

The vulnerability in the filediff tool in CVStrac allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the rcsinfo parameter.

Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.

An unknown vulnerability related to the handling of large requests in RAdmin for Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.

Buffer overflow vulnerability in the KSDWRTB function of the dbms_system package in Oracle Database 9i and 8i. A remote authorized user can exploit a long second argument to execute arbitrary code on the database server.

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.

SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter.

SQL injection vulnerability in verify.asp of Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter.

WHM AutoPilot 2.4.6.5 and earlier contain multiple PHP remote file inclusion vulnerabilities in step_one.php, step_one_tables.php, and step_two_tables.php. These flaws allow an attacker to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote server containing malicious code.

ArGoSoft FTP version 1.4.2.4 and earlier does not limit the number of failed login attempts, making it easier for remote attackers to guess passwords via brute force attack.

Multiple vulnerabilities were found in the H.323 protocol implementation in First Virtual Communications products (Click to Meet Express, Premier, Conference Server, and V-Gate). A remote attacker can exploit these flaws to cause a denial of service (DoS), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.