CVE Vulnerability Catalog

The vulnerability in PeerSec MatrixSSL before version 1.1 caches session keys for an indefinitely long time, making it easier for remote attackers to hijack a session.

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot) sequence.

Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and development branch before 1.3.5. The flaw allows write access to specific proc entries from a vserver context, potentially leading to unspecified impacts.

A stack-based buffer overflow vulnerability in the swnet.dll library in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code by sending a long message parameter in a SendMsg action to action.htm.

The vulnerability in Java 2 Micro Edition (J2ME) stems from improper bytecode validation, allowing a remote attacker to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.

Buffer overflow vulnerability in the KSDWRTB function of the dbms_system package in Oracle Database 9i and 8i. A remote authorized user can exploit a long second argument to execute arbitrary code on the database server.

Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.

The SSL HTTP Server in HP Web-enabled Management Software versions 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise trusted certificates by uploading their own certificates.

Multiple unknown vulnerabilities have been discovered in Real Estate Management Software 1.0. Their impact and attack vectors are unspecified.

Multiple unknown vulnerabilities have been discovered in Online Recruitment Agency 1.0. Their impact and attack vectors are unspecified.

SQL injection vulnerability in Interchange before version 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php.

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

Multiple overflows in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.

Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c.

The vulnerability allows remote execution of PHP code by injecting an external URL into the appdir parameter in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier.

The vulnerability in login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.

The print-from-email feature in Canon ImageRUNNER 5000i and C3200 allows remote attackers to print arbitrary text without authentication by sending a text/plain email to TCP port 25, when IP address range filtering is not used.

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the 'product' parameter in showproduct.php or the 'cat' parameter in showcat.php.