4117 matches found
Sql injection
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPENAME argument in the 1 GETDOMAININDEXTABLES or 2 GETV2DOMAININDEXTABLES function in the DBMSEXPORTEXTENSION package...
CVE-2006-2505
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPENAME argument in the 1 GETDOMAININDEXTABLES or 2 GETV2DOMAININDEXTABLES function in the DBMSEXPORTEXTENSION package...
CVE-2005-4424
Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. dot dot in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00...
CVE-2005-3553
Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in conjunction with the login/userinfo.php path and 2 the session parameter aka the PHPKITSID variable...
CVE-2005-1870
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter...
GLSA-200504-23 : Kommander: Insecure remote script execution
The remote host is affected by the vulnerability described in GLSA-200504-23 Kommander: Insecure remote script execution Kommander executes data files from possibly untrusted locations without user confirmation. Impact : An attacker could exploit this to execute arbitrary code with the permission...
CVE-2005-1108
The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...
CVE-2005-1108
The ijuntrustedurl function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request...
CVE-2004-1437
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Update for Office Communications Server 2007 R2 (KB 978008)
Update for Office Communications Server 2007 R2 KB 978008...
Update for Office Communications Server 2007 R2 (KB 2590698)
Update for Office Communications Server 2007 R2 KB 2590698...
2025-12 Update for Windows Server 2008 R2 for x64-based Systems (KB5074977)
2025-12 Update for Windows Server 2008 R2 for x64-based Systems KB5074977...
Update for Windows Server 2008 R2 x64 Edition (KB3156417)
Update for Windows Server 2008 R2 x64 Edition KB3156417...
Update for Windows Server 2012 R2 (KB3060383)
Update for Windows Server 2012 R2 KB3060383...
Update for Windows Server 2012 R2 (KB3139219)
Update for Windows Server 2012 R2 KB3139219...
Update for Windows Server 2012 R2 (KB3140786)
Update for Windows Server 2012 R2 KB3140786...
Update for Windows Server 2012 R2 (KB3185279)
Update for Windows Server 2012 R2 KB3185279...