CVE Vulnerability Catalog

TeamWork Job Links allows arbitrary file upload in the profileChange and coverChange functions.

IBM Security Identity Manager Adapters versions 6.0 and 7.0 do not perform an authentication check for critical resources or functionality, allowing anonymous users access to protected areas.

The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via a crafted BPG file.

The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted BPG file. The issue is related to improper interaction with hls_pcm_sample in hevc.c and put_pcm_var in hevcdsp_template.c in FFmpeg.

Multiple XXE vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause denial of service, or, on Windows, obtain Documentum user hashes via a crafted DTD.

Multiple XXE vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause denial of service, or, on Windows, obtain Documentum user hashes.

IBM Security Identity Manager Virtual Appliance versions 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. An attacker could exploit this vulnerability by sending a specially-crafted request.

Norton Remove & Reinstall is susceptible to a DLL preloading vulnerability, allowing an attacker to inject a malicious DLL. As a result, the application may execute unauthorized code in its context.

FreeIPA 4.x with API version 2.213 allows remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session.

In usb-creator before version 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04, there is a vulnerability that allows local users to gain privileges by leveraging a missing call to check_polkit for the KVMTest method.

The print-wb.c file in tcpdump before version 4.7.4 contains a vulnerability that allows remote attackers to cause a denial of service through a segmentation fault and process crash.

Integer overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to execute arbitrary code via a crafted application.

The daily mandb cleanup job in Man-db before version 2.7.6.1-1 in Ubuntu and Debian allows local users with access to the man account to gain privileges via insecure chown use.

The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before version 3.3.4 mishandles empty sprop-parameter-sets values, allowing remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file.

The Simple Student Result plugin before version 1.6.4 for WordPress has an authentication bypass vulnerability. The fn_ssr_add_st_submit() and fn_ssr_del_st_submit() functions in functions.php only require knowing the student ID number.

In GeniXCMS 1.1.4, on the Upload Modules page, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

In GeniXCMS version 1.1.4, on the Install Themes page, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.

JerryScript 1.0 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted .js file. The issue arises from unrecognized \ characters causing incorrect 0x00 characters in bytecode.literal data.

IBM Business Process Manager versions 7.5, 8.0, and 8.5 are vulnerable to privilege escalation due to improper distinction between internal group memberships and user registry group memberships. By manipulating LDAP group membership, an attacker may gain privileged access.

IBM Business Process Manager versions 7.5, 8.0, and 8.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.