CVE Vulnerability Catalog

A remote file inclusion vulnerability in secure_img_render.php of e107 0.615 allows attackers to execute arbitrary PHP code by modifying the 'p' parameter to reference a URL on a remote server containing malicious code.

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.

SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.

The vulnerability in Netgear RP114 allows a remote attacker to bypass keyword-based URL filtering by requesting a long URL, for example containing a large number of %20 (hex-encoded space) sequences.

In DeleGate version 8.9.2 and earlier, the ssl_prcert function in the SSLway filter (sslway.c) contains a buffer overflow. A remote attacker can exploit a certificate with a long subject or issuer name field to execute arbitrary code.

In SUSE LINUX 9.1 Personal edition Live CD, the root account is configured without a password, allowing remote attackers to gain privileges via SSH.

The Downloads module in Php-Nuke 6.x through 7.2 contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL queries via the orderby or sid parameters in modules.php.

Unknown vulnerability in ecartis before version 1.0.0 does not properly validate user input, allowing attackers to obtain mailing list passwords.

Multiple buffer overflows in vfte, based on FTE, before version 0.50, allow local users to execute arbitrary code.

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

Apache versions 1.4.x before 1.3.30 and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allow remote attackers to cause a denial of service (blocked new connections) via a 'short-lived connection on a rarely-accessed listening socket.'

Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, related to the handling of HTML-formatted email.

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code. This is demonstrated using a script in a compiled help (CHM) file that references InfoTech Storage (ITS) protocol handlers.

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal versions 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.

Buffer overflow in the win32_stat function for ActiveState's ActivePerl and Larry Wall's Perl before version 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8, possibly related to a configuration file setting.

The libpam-pgsql library before version 0.5.2 has an SQL injection vulnerability that allows attackers to execute arbitrary SQL statements.

The vulnerability in isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service by sending an ISAKMP packet with a malformed Cert Request payload, leading to an integer underflow in a malloc operation.

Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

Multiple buffer overflows in ecartis before version 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.