CVE Vulnerability Catalog

The Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

Multiple SQL injection vulnerabilities have been discovered in PL/SQL procedures running with definer rights in Oracle 9i and 10g. A remote attacker can exploit these flaws to execute arbitrary SQL commands and escalate privileges.

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

Buffer overflow vulnerability in extproc component in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Vulnerability in ISQL*Plus component of Oracle 10g Application Server allows remote attackers to execute arbitrary files by providing an absolute pathname in the file parameter of the load.uix script.

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.

Vulnerability in dbsnmp and nmo programs in Oracle 8i, 9i, and Oracle IAS 9.0.2.0.1 on Unix systems uses a default path to find and execute library files while operating at raised privileges, allowing certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

Vulnerability in WpQuiz versions 2.60b1 through 2.60b8 allows remote attackers to gain elevated privileges by directly requesting the adminrestore.php file in the extras directory.

SQL injection vulnerability in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL queries and bypass authentication via the user, password, or crypted_password parameters.

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the linpha_userid or linpha_password cookies.

The vulnerability in Internet Explorer for Mac 5.2.3 and Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain. This facilitates web site spoofing and other attacks, known as the frame injection vulnerability.

Vulnerability in Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the 'page' parameter.

Vulnerability in Sun Java System Portal Server 6.2 allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

The vulnerability in Safari 1.2.2 allows a frame from one domain to inject content into a frame belonging to another domain. This issue, known as the frame injection vulnerability, can be exploited for website spoofing and other attacks.

Konqueror versions 3.1.3, 3.2.2, and possibly others do not properly prevent a frame in one domain from injecting content into a frame belonging to another domain, enabling web site spoofing and other attacks, known as the frame injection vulnerability.

Buffer overflow in Medal of Honor: Allied Assault 1.11v9 and earlier, Breakthrough 2.40b and earlier, and Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as the getinfo query, the connect packet, and other unknown vectors.