CVE Vulnerability Catalog

The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.

Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.

The mod_digest_apple module for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by modifying the createTextRange or createRange method. Exploitation of these vulnerabilities may lead to unauthorized access to data.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's 'href' to the malicious Javascript, then calling execCommand('Refresh') to refresh the page.

Cisco Personal Assistant versions 1.4(1) and 1.4(2) disables password authentication when 'Allow Only Cisco CallManager Users' is enabled, allowing remote attackers to gain access with a valid username.

Internet Explorer versions 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.

The GUI functionality for an interactive session in Symantec LiveUpdate versions 1.70.x through 1.90.x, used in Norton Internet Security and SystemWorks and AntiVirus from 2001 to 2004, allows local users to gain SYSTEM privileges.

The secldapclntd daemon in AIX 4.3, 5.1, and 5.2 uses an Internet socket for communication with the loadmodule, allowing remote attackers to directly connect to the daemon and conduct unauthorized activities.

An unknown vulnerability in minimalist mailing list manager versions 2.4, 2.2, and possibly others, allows remote attackers to execute arbitrary commands.

Buffer overflow vulnerability in the WTHoster and WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename.

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users with DSA privileges to execute arbitrary code via a long ONCONFIG environment variable.

The default installation of Cisco voice products on IBM servers running OS earlier than 2000.2.6 with the IBM Director Agent does not require authentication, allowing remote attackers to gain administrator privileges by connecting to TCP port 14247.

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame. When the history.back function is called, this URL is added to the history list and executed in the top window's zone.

The mremap system call in Linux kernel 2.4.x before version 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, allowing local users to cause a denial of service and possibly gain privileges by remapping a virtual memory area.

A stack-based buffer overflow in vfs_s_resolve_symlink of Midnight Commander (mc) version 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

Buffer overflow in fsp before version 2.81.b18 allows remote users to execute arbitrary code.

The parseAddress code in SquirrelMail 1.4.0 and GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the 'To:' field.

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.