CVE Vulnerability Catalog

The pg_ctlcluster script in the postgresql-common package in various versions of Debian and Ubuntu allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

The dccp_disconnect function in the Linux kernel through version 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

i2pd versions before 2.17 and pre-alpha implementations of kovri for the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, allowing remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read.

The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal attack that can be exploited by a remote attacker to read/write arbitrary files.

A command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before version 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via the disk field.

A vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to access arbitrary files or directories.

ZKTime Web Software version 2.0.1.12280 allows the application user to elevate privileges through the 'password_change()' function. An attacker can exploit this vulnerability by creating a malicious CSRF link to add themselves as an administrator.

The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact via a crafted file.

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

GNU Binutils 2.29.1 has a mishandling issue with certain global symbols in nm.c and objdump.c, which can lead to application crashes or denial of service.

The _bfd_coff_read_string_table function in the BFD library (libbfd) in GNU Binutils 2.29.1 does not properly validate the size of the external string table, which can lead to denial of service or buffer overflow.

The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which can lead to denial of service or heap-based buffer overflow.

The Binary File Descriptor (BFD) library in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.

ntguard.sys and ntguard_x64.sys version 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request.

The IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability in ntguard_x64.sys version 0.18780.0.0, which can be exploited via a DeviceIoControl request with code 0x83000058.

Fiyo CMS version 2.0.7 has an arbitrary file read vulnerability in check_file.php that can be exploited via the $_GET['src'] or $_GET['name'] parameters.

Fiyo CMS version 2.0.7 has SQL injection vulnerability in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in /system/site.php via the $_REQUEST['link'] parameter.