CVE Vulnerability Catalog

The VBSEO module for vBulletin contains a vulnerability that allows remote authenticated users to execute arbitrary code via the HTTP Referer header in visitormessage.php.

Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider.

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 can lead to easy misconfiguration of TLS trust. Users specifying the `ssl_ca` parameter without providing `ssl_certs_dir` receive a default value that trusts certificates from all system-trusted certificate authorities.

The tpacket_rcv function in the Linux kernel before version 4.13 mishandles vnet headers, which might allow local users to cause a denial of service through buffer overflow and disk and memory corruption.

CVE-2017-10860 describes an untrusted search path vulnerability in the 'i-filter 6.0 installer', allowing an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

CVE-2017-10859 describes an untrusted search path vulnerability in the 'i-filter 6.0 installer', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This issue occurs when the code signing timestamp is before August 23, 2017 (JST).

CVE-2017-10858 involves an untrusted search path vulnerability in the 'i-filter 6.0 install program', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

FENCE-Explorer for Windows V8.4.1 and earlier has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors.

VMware ESXi, Workstation, and Fusion contain an out-of-bounds write vulnerability in the SVGA device that may allow a guest to execute code on the host.

The sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, due to an unsafe 'chown -R' command being executed.

An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before version 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution.

A remote code execution vulnerability exists in the Android system via Bluetooth. This affects Android versions from 4.4.4 to 8.0.

There is a remote code execution vulnerability in the Android system (Bluetooth). It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted 'Content-Type: text/enriched' data. In particular, an Emacs user can be instantly compromised by reading a crafted email message.

Pagure version 3.3.0 and earlier is vulnerable to loss of confidentiality due to improper authorization.

Vulnerability in the WordPress plugin Event Expresso Free v3.1.37.11.L is due to the lack of sanitization of user-supplied input via the $id parameter before it is used in an SQL statement.

Vulnerability in the WordPress plugin 'add-edit-delete-listing-for-member-module' version 1.0, due to the lack of sanitization of user-supplied input before it is used in an SQL statement.

Vulnerability in WordPress plugin DTracker v1.5 allows injecting new contacts into the wp_contact table without checking user authorization.