CVE Vulnerability Catalog

Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service via a Short Message Service (SMS) message with a long image name.

A memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service by hanging an SMB request via a NetBIOS continuation packet.

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.

Epic Games Unreal Engine versions 226f through 436 are vulnerable to an attack that can lead to denial of service through CPU consumption or crash, and potentially execute arbitrary code. Attackers can exploit a packet with a negative size value, which is treated as a large positive number during memory allocation.

The vulnerability in guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

D-Forum versions 1.00 to 1.11 have a PHP remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via a crafted URL in the my_header or my_footer parameters.

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.

PHP remote file inclusion vulnerability in hit.php for Kietu versions 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter.

Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.

Buffer overflow in Opera versions 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

Buffer overflow in ISMail 1.4.3 and earlier allows remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.

In the default configuration of Majordomo 2.0 through 1.94.4, the which_access variable is set to 'open', allowing remote attackers to identify the email addresses of mailing list members via a 'which' command.

Bastille B.02.00.00 on HP-UX 11.00 and 11.11 improperly configures the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

Buffer overflow in the stmkfont utility of HP-UX from version 10.0 to 11.22 allows local users to gain privileges via a long command line argument.

rs.F300 for HP-UX versions 10.0 through 11.22 uses the PATH environment variable to find and execute programs like rm while operating at raised privileges. This allows local users to gain elevated privileges by modifying the path to point to a malicious rm program.

Buffer overflow in the remote console (rcon) in Battlefield 1942 versions 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and password.

D-Link wireless access point DWL-900AP+ versions 2.2, 2.3, and possibly 2.5 allow remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.

The default installation of Trend Micro OfficeScan versions 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.