CVE Vulnerability Catalog

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, allowing remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php.

WPHRM Human Resource Management System version 1.0 for WordPress allows SQL Injection via the employee_id parameter.

Skybox Manager Client Application prior to version 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker.

OpenText Document Sciences xPression version 4.5SP1 Patch 13 (older versions may also be affected) is prone to SQL Injection in the documentId parameter on the /xAdmin/html/cm_doclist_view_uc.jsp page. To exploit this vulnerability, an attacker must first authenticate to the application.

OpenText Document Sciences xPression version 4.5SP1 Patch 13 (older versions may also be affected) is prone to SQL Injection in the jobRunId parameter at /xDashboard/html/jobhistory/downloadSupportFile.action. An attacker must authenticate to the application first to exploit this vulnerability.

An integer underflow in the add_pseudoheader function in dnsmasq before version 2.78 allows remote attackers to cause a denial of service via a crafted DNS request when the --add-mac, --add-cpe-id, or --add-subnet option is specified.

A memory leak in dnsmasq before version 2.78 occurs when the --add-mac, --add-cpe-id, or --add-subnet option is specified. This allows remote attackers to cause a denial of service through DNS response creation manipulation.

In dnsmasq before version 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zeros, causing dnsmasq to crash.

IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Buffer overflow in hasplms in Gemalto ACC (Admin Control Center) in all versions from HASP SRM 2.10 to Sentinel LDK 7.50 allows remote attackers to shut down the remote process, leading to denial of service.

The execution of the chroothole_client program in UCOPIA Wireless Appliance devices before version 5.1.8 allows remote attackers to gain root privileges by using a dollar sign ($) in the arguments.

The restricted shell interface in UCOPIA Wireless Appliance before version 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

Apache Wicket versions 6.x before 6.25.0, 7.x before 7.5.0, and 8.0.0-M1 contain a security vulnerability that improperly handles CSRF prevention, failing to detect some cross-origin requests. The issue also involves not checking all Wicket server-side targets.

The management interface on Huawei FusionServer rack servers RH2288 V3, RH2288H V3, XH628 V3, RH1288 V3, RH2288A V2, RH1288A V2, RH8100 V3, CH222 V3, CH220 V3, and CH121 V3 before specified software versions does not limit the number of query attempts, allowing remote authenticated users to obtain higher-level user credentials via a brute force attack.

The IsVolumeAccessibleByCurrentUser and MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed do not check the impersonation level of impersonation tokens, allowing local users to impersonate a user at SecurityIdentify level and gain access to other users' mounted encrypted volumes.

The IsDriveLetterAvailable method in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed on Windows does not properly validate drive letter symbolic links. This allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.

Lenovo System Update (formerly ThinkVantage System Update) before version 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.

Bamboo versions 2.2 before 5.8.5 and 5.9.x before 5.9.7 allow remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

The FoFiTrueType::getCFFBlock function in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.

The FoFiType1C::convertToType0 function in Poppler 0.59.0 has a heap-based buffer over-read vulnerability when encountering an out-of-bounds font dictionary index. This can be exploited by an attacker to launch a denial of service attack.