CVE Vulnerability Catalog

STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file. The issue is related to a Read Access Violation on Block Data Move.

XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.

IrfanView version 4.44 for 32-bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.

IrfanView version 4.44 for 32-bit systems allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.

XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue relates to how data from the faulting address controls the subsequent write address.

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27.

The CSRF vulnerability in IBM Security Identity Manager versions 5.1, 6.0, and 7.0 allows remote attackers to hijack user authentication, potentially leading to cross-site scripting attacks, web cache poisoning, or other unspecified impacts.

OpenWebif version 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py. The issue occurs when the URL points to an attacker-controlled site, allowing for the introduction of a malicious package.

The Crony Cronjob Manager plugin for WordPress before version 0.4.7 has a CSRF vulnerability via the name parameter in an action=manage&do=create operation, allowing for the injection of XSS sequences.

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.

In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.

Heap-based Buffer Overflow on Tenda W15E devices before version 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.

Directory Traversal vulnerability on Tenda W15E devices before version 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.

A vulnerability was discovered in SAP E-Recruiting (versions 605-617) that allows attackers to register and confirm email addresses they do not have access to. This can be achieved by bypassing the confirmation process, leading to the potential blocking of legitimate user registrations.

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26) regarding remote file inclusion in the Connectors module. This allows authenticated users to include remotely accessible system files via a module=CallRest&url query string.

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 in the Documents and Emails modules that allows an authenticated user to perform SQL injection. An attacker could exploit these vulnerabilities by sending a crafted SQL request.

The libarchive library version 3.3.2 has an off-by-one error in the read_header function affecting UTF-16 names in RAR archives. This can lead to an out-of-bounds read in the archive_read_format_rar_read_header function.

CVE-2017-14500 concerns improper neutralization of special elements used in OS commands in the podcast playback function of Podbeuter in versions 0.3 through 2.9. This allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure containing shell metacharacters in its filename.

Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application.