Vulnerabilities (CVE)

Filtered by CWE-189
Total 1224 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-2367 1 Socks5 1 Socks5 2008-09-05 7.8 HIGH N/A
Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.
CVE-2002-2245 1 Netbsd 1 Ftpd 2008-09-05 5.0 MEDIUM N/A
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
CVE-2002-2235 1 Jelsoft 1 Vbulletin 2008-09-05 5.0 MEDIUM N/A
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.
CVE-2007-1383 1 Php 1 Php 2008-09-05 10.0 HIGH N/A
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related issue to CVE-2007-1286.