CVE Vulnerability Catalog

Zoho ManageEngine Applications Manager version 13 before build 13500 allows post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request.

OpenEMR versions before 5.0.0 Patch 5 allow unauthenticated remote database copying because setup.php exposes functionality for cloning an existing OpenEMR site to an arbitrary attacker-controlled MySQL server via vectors involving a crafted state parameter.

In the Linux kernel before version 4.13.6, there is a vulnerability in drivers/uwb/uwbd.c that allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device.

Mahara versions 15.04 before 15.04.9, 15.10 before 15.10.5, and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log.

Mahara versions 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to not regenerating session IDs on login or logout. This increases the risk of session fixation attacks for site users.

Mahara versions 15.04 before 15.04.8, 15.10 before 15.10.4, and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of the XML through the PHP 'unserialize()' function when importing a skin from an XML file.

Mahara versions 1.8 before 1.8.7, 1.9 before 1.9.5, 1.10 before 1.10.3, and 15.04 before 15.04.0 are vulnerable to server-side request forgery (SSRF) attacks due to not checking all curl redirect processes against a white or black list.

Mahara versions 1.8 before 1.8.6, 1.9 before 1.9.4, 1.10 before 1.10.1, and 15.04 before 15.04.0 are vulnerable due to group members potentially losing access to group files they uploaded if another group member changes the access permissions on them.

Mahara versions 15.04 before 15.04.8, 15.10 before 15.10.4, and 16.04 before 16.04.2 are vulnerable to a user causing another user's artefacts to be included in a Leap2a export of their own pages under certain circumstances.

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute.

In the yajl-ruby gem version 1.3.0 for Ruby, supplying a crafted JSON file to Yajl::Parser.new.parse causes the entire Ruby process to crash with a SIGABRT in the yajl_string_decode function. This results in the termination of the whole Ruby process and potentially a denial of service.

Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field.

In Vir.IT eXplorer Anti-Virus before version 8.5.42, there is an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x8273007C in the driver file (VIAGLT64.SYS).

SecurityCenter versions 5.5.0, 5.5.1, and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan.

A vulnerability in the implementation of PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The issue arises from an incorrect default configuration setting that allows fail open in standalone mode.

A vulnerability in the CAPWAP Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to incomplete input validation of fields in CAPWAP Discovery Request packets.

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series and Firepower 9300 could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to insufficient input validation of certain Smart Licensing configuration parameters.

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to execute arbitrary SQL queries, impacting the confidentiality and integrity of the application.

A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated attacker to gain access to services only available on the internal network of the device. The issue is due to an incorrect firewall rule that may forward traffic from the public interface to the internal virtual network of the APIC-EM.