CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite versions 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.

LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.

The WebBrowser ActiveX control or the MSHTML rendering engine in Internet Explorer 6 allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute JavaScript, as demonstrated via delayed HTTP redirects with a Location header containing a "URL:" prefix before a "ms-its" protocol URI, or by modifying the window's location attribute.

Real Networks RealPlayer 10 contains a buffer overflow vulnerability that can be exploited by a remote attacker to execute arbitrary code via a URL containing a large number of period characters.

A buffer overflow vulnerability in the write_packet function in control.c for l2tpd may allow remote attackers to execute arbitrary code.

Integer overflow in the hpsb_alloc_packet function in the IEEE 1394 (Firewire) driver for Linux kernels 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions raw1394_write, state_connected, handle_remote_request, or hpsb_make_writebpacket.

Buffer overflow vulnerability in the TranslateFilename function in common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

Vulnerability in RSBAC 1.2.2-1.2.3 allows local users to access sys_creat, sys_open, and sys_mknod functions inside jails, potentially leading to privilege escalation.

Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.

The Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.

Vulnerability in comersus_gatewayPayPal.asp in Comersus Cart 5.09 (and earlier versions before 5.098) allows remote attackers to change item prices by directly modifying them in the URL.

The Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

Multiple SQL injection vulnerabilities have been discovered in PL/SQL procedures running with definer rights in Oracle 9i and 10g. A remote attacker can exploit these flaws to execute arbitrary SQL commands and escalate privileges.

Vulnerability in ISQL*Plus component of Oracle 10g Application Server allows remote attackers to execute arbitrary files by providing an absolute pathname in the file parameter of the load.uix script.

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.