CVE Vulnerability Catalog

Unknown vulnerability in RemoteEditor before version 0.1.1, related to oversize submissions, has unknown impact and attack vectors.

Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.

Unknown vulnerability in the 'access code' in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.

SQL injection vulnerability in index.cfm of CFWebstore 5.0 allows remote attackers to execute arbitrary SQL commands via category_id, product_id, or feature_id parameters.

Unknown vulnerability in the 'access code' in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.

A vulnerability in Novell Client Firewall (NCF) 2.0, based on Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with elevated privileges.

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.

The vulnerability in the ImageManager component in e107 before version 0.617 allows a remote attacker to execute arbitrary code by uploading a PHP file due to improper file type validation.

Vulnerability in Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options handled by iftpmgr.exe.

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.

Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.

Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the FID parameter in board.php, sortorder/perpage/id parameters in member.php, forums parameter in search.php, and PID/FID parameters in post.php.

A vulnerability in SurgeLDAP 1.0g (Build 12) and possibly earlier versions before 1.0h allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.

The vulnerability in UUDeview 0.5.20 and earlier is due to insecure handling of temporary files during decoding. The attack vectors and impact are unknown.

SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie.

Unspecified vulnerability in ASN.1 Compiler (asn1c) before version 0.9.7, occurring when processing "CHOICE" types with "indefinite length structures." Impact and attack vectors are unknown.

Unspecified vulnerability in ArGoSoft FTP server before version 1.4.2.2 allows attackers to upload .lnk files via unknown vectors.

SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the admin_name or admin_pass parameters.