CVE Vulnerability Catalog

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability exists in firmware versions V1.2.31805 and V2.2.36123 due to lack of user input sanitizing in the tracert diagnostic tool.

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. An attacker knowing this key could decrypt protected information stored in the registry or configuration files, and in versions before v9.x, decrypt the Unattended Access password.

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. It is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. Sending a malicious CDP packet could cause a stack overflow, potentially allowing code execution with administrative privileges.

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files. To exploit, an attacker would first have to gain execution on the victim system.

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source.

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. Parameter-provided templates are disabled by default but can be enabled by setting `params.resource.loader.enabled` to `true`, which requires configuration API access. Solr 8.4 removed the params resource loader entirely and only enables configset-provided template rendering when the configset is `trusted`.

TVT NVMS-1000 devices allow GET /.. Directory Traversal, which allows access to files outside the web root. The vulnerability can be exploited to read sensitive system files.

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. The vulnerability does not allow reading file contents, only detecting their existence.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.