CVE Vulnerability Catalog

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via the product parameter in showproduct.php or the cat parameter in showcat.php.

IBM Cloudscape 5.1 running on jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.

Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.

A stack-based buffer overflow in The Palace client version 3.5 and earlier allows remote attackers to execute arbitrary code via a link to a palace:// URL followed by a long server address string.

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch versions 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.

AIM Sniff (aimSniff.pl) version 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.

The do_change_cipher_spec function in OpenSSL versions 0.9.6c to 0.9.6k and 0.9.7a to 0.9.7c allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Buffer overflow vulnerability in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including version 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

PHPX versions 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

X-Cart version 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in upgrade.php and general.php.

Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080.

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.

Multiple SQL injection vulnerabilities in YaBB SE versions 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via the msg and postid parameters in ModifyMessage.php.

An unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.

Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user. This could allow remote attackers within the local cluster to gain privileges.

In versions 1.6.10 to 1.6.15 of the Eggheads Eggdrop IRC bot, the Share.mod component may mistakenly assign STAT_OFFERED status to a bot that is not a sharebot. This allows remote attackers to use this status to promote a bot to a sharebot and conduct unauthorized activities.

Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.

A stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.

SL Mail Pro 2.0.9 and earlier versions have a stack-based buffer overflow in Supervisor Report Center that allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.