CVE Vulnerability Catalog

CVE-2017-16788 describes a vulnerability in the 'Upload Groupkey' functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before version 6.24.004. It allows remote authenticated users with Admin-User access to write to arbitrary files, potentially gaining root privileges.

An authentication bypass vulnerability was discovered in version 2.0.2 of the Conserus Workflow Intelligence application. An attacker can exploit this by sending a malicious HTTP GET request to gain access to higher privilege user accounts.

The Ping() function in ui/api/target.go in Harbor through version 1.3.0-rc4 has an SSRF vulnerability via the endpoint parameter to /api/targets/ping.

Techno Portfolio Management Panel through November 16, 2017 allows SQL Injection via the s parameter in panel/search.php.

In VideoLAN VLC media player through version 2.2.8, there is a type conversion vulnerability in the MP4 demux module that leads to an invalid free. The type of a box may change between a read operation and a free operation.

Ruby before 2.4.3 allows command injection in Net::FTP. Functions like get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open local files, which can lead to arbitrary command execution if the localfile argument starts with the '|' character.

Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, making them susceptible to a cross-site request forgery (CSRF) attack.

A Denial of Service (DoS) vulnerability related to regular expressions exists in the npm package ecstatic, before version 2.0.0. An attacker can overload and crash a server by sending a maliciously crafted string.

A privilege escalation vulnerability in Fortinet FortiClient for Windows 5.4.3 and earlier as well as 5.6.0 allows an attacker to exploit the Windows 'security alert' dialog, which can pop up when the 'VPN before logon' feature is enabled and an untrusted certificate chain is used.

The lib/gui.py file in Bob Hepple gjots2 version 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

The uiutil.c file in Mensis version 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

The default.tcl file in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 1.9.22 of Kiwi, the file examples/framework/news/news3.py does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 4.8.6 of GNU GLOBAL, the gozilla.c file does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In Geomview 1.9.5, the common/help.c file does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In AbiWord 3.0.2-2, the file af/util/xp/ut_go_file.cpp does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In ScummVM 1.9.0, the posix.cpp file does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

The delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 1.2.3.57 of Bernard Parisse Giac, the Input.cc file does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

The guiclient.cpp file in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.