CVE Vulnerability Catalog

Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.

PHPX versions 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

A stack-based buffer overflow in The Palace client version 3.5 and earlier allows remote attackers to execute arbitrary code via a link to a palace:// URL followed by a long server address string.

Multiple SQL injection vulnerabilities in YaBB SE versions 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via the msg and postid parameters in ModifyMessage.php.

X-Cart version 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in upgrade.php and general.php.

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.

AIM Sniff (aimSniff.pl) version 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch versions 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.

Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080.

An unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.

The do_change_cipher_spec function in OpenSSL versions 0.9.6c to 0.9.6k and 0.9.7a to 0.9.7c allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name.

Buffer overflow in the UUDeview package, used in WinZip versions 6.2 through 8.1 SR-1, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

Multiple buffer overflows in Overkill (0verkill) version 0.15pre3 may allow local users to execute arbitrary code in the client via a long HOME environment variable in the load_cfg and save_cfg functions. It may also allow remote attackers to execute arbitrary code via long strings to the send_message function and, in the server, via the parse_command_line function.

The firmware of the Gigabyte Gn-B46B 2.4Ghz wireless broadband router version 1.003.00 allows local users on the same network to bypass authentication by using a copy of the router's HTML menu on a separate system.

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.

The American Power Conversion (APC) Web/SNMP Management SmartSlot Card versions 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, allowing remote attackers to gain unauthorized access.

A stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before version 4.5.538.001 and ZoneLabs Integrity client before version 4.0.146.046 and 4.5 before version 4.5.085 allows remote attackers to execute arbitrary code via a long RCPT TO argument.

SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 version 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.

SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.