CVE Vulnerability Catalog

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci.

Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.

A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php.

A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker to trick a victim into sending their credentials through the Sling login form.

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

A security-check flaw was found in the way the Heketi 5 server API handled user requests, allowing an authenticated user to send specially crafted requests. This could lead to remote command execution as the user running the Heketi server and possibly privilege escalation.

The BrightSign Digital Signage (4k242) device with firmware 6.2.63 and below allows renaming and modifying files via /tools.html.

DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.

In the GNU C Library (glibc) versions 2.19 through 2.26, there is a flaw in handling RPATH and RUNPATH containing $ORIGIN for privileged (setuid or AT_SECURE) programs. This allows local users to gain privileges via a Trojan horse library in the current working directory.

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer.

The PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets.

The Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

Multiple D-Link devices, including DIR-850L firmware versions 1.14B07 and 2.07.B05, contain a stack-based buffer overflow vulnerability in the HNAP web administration interface.

Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.

A vulnerability in Trend Micro ScanMail for Exchange 12.0 allows overwriting sensitive files in the ScanMail for Exchange directory for certain specific installations utilizing an uncommon feature - Other Update Sources.

CVE-2017-11397 describes a service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below that could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.

The raw_sendmsg() function in the Linux kernel through version 4.14.6 has a race condition in inet->hdrincl, leading to uninitialized stack pointer usage. This allows a local user to execute code and gain privileges.

An Information Disclosure vulnerability in Fortinet FortiClient for Windows, Mac OSX, and Linux allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.