CVE Vulnerability Catalog

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.

A use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS may allow remote attackers to execute arbitrary code.

There is a LFD (local file disclosure) vulnerability on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.

Polycom RealPresence Resource Manager before version 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.

Polycom RealPresence Resource Manager (RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.

In Perl 5 before version 5.24.3-RC1 and 5.26.x before 5.26.1-RC1, a heap-based buffer overflow vulnerability was discovered in the S_regatom function in regcomp.c. An attacker can remotely cause a denial of service (DoS) by sending a regular expression containing the '\N{}' escape sequence with the case-insensitive modifier.

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.

The Basic authentication code in the WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its logs, potentially leading to the execution of arbitrary commands.

The Host Control web service in SAP NetWeaver AS JAVA versions 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request.

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call.

The wiki_decode function in the Kaltura admin panel before version 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

The WP Fastest Cache plugin before version 0.8.3.5 contains multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php. This allows remote attackers to hijack the authentication of unspecified victims for certain requests.

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

Cisco Cloud Web Security before version 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods.

CVE-2014-9619 describes an unrestricted file upload vulnerability in Netsweeper that allows remote authenticated users with admin privileges to execute arbitrary PHP code by uploading a file with a double extension.

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page.

The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites.

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.

Versions of Apache Tomcat from 7.0.0 to 7.0.80 have a vulnerability that allows bypassing security constraints and viewing the source code of JSPs for resources served by VirtualDirContext using a specially crafted request.