CVE Vulnerability Catalog

Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access. The attack can be executed through various parameters in PHP files, such as cat, id, and cat_manufacturer.

SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 version 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.

A stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before version 4.5.538.001 and ZoneLabs Integrity client before version 4.0.146.046 and 4.5 before version 4.5.085 allows remote attackers to execute arbitrary code via a long RCPT TO argument.

The American Power Conversion (APC) Web/SNMP Management SmartSlot Card versions 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, allowing remote attackers to gain unauthorized access.

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch versions 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.

Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.

Buffer overflow vulnerability in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including version 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name.

The vulnerability in viewtopic.php of phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, leading to a heap-based buffer overflow.

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the 'SSLCipherSuite' directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Vulnerability in MySQL before versions 3.23.59, 4.0.19, 4.1.2, and 5.0.1 incorrectly checks CREATE/INSERT privileges on the original table instead of the target table during an ALTER TABLE RENAME operation. This could allow attackers to perform unauthorized actions on tables.

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

Buffer overflow vulnerability in the mysql_real_connect function in MySQL 4.x before 4.0.21 and 3.x before 3.23.49. Remote DNS servers can cause a denial of service and potentially execute arbitrary code via a DNS response with a large address length (h_length).

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, Windows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names.

An unknown vulnerability in the Graphics Rendering Engine of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via Windows Metafile (WMF) or Enhanced Metafile (EMF) image formats that involve 'an unchecked buffer.'

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allow attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an 'unchecked buffer,' possibly a buffer overflow.