CVE Vulnerability Catalog

A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.

A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.

IBM Emptoris Services Procurement version 10.0.0.5 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM Emptoris Services Procurement version 10.0.0.5 could allow a remote attacker to include arbitrary files. An attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server.

Wersje ARM mbed TLS przed 1.3.21 oraz 2.x przed 2.1.9, w przypadku skonfigurowanej opcjonalnej autoryzacji, umożliwiają zdalnym atakującym ominięcie autoryzacji partnera za pomocą łańcucha certyfikatów X.509 z wieloma pośrednikami. Warto zauważyć, że wersje mbed TLS wydane pod nazwą PolarSSL nie są dotknięte tą podatnością.

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before version 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via malicious files.

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) in all versions below V8.3. An attacker performing a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) in all versions below V1.81.2. An attacker with network access could obtain the session ID of an active user session when the user is logged into the web interface.

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before version 1.03.367. An attacker can send specially crafted packets to the OPC Discovery Server, potentially leading to unauthorized access to various resources.

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application.

An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple files and folders with ACLs that affect other users are allowed to be modified by non-administrator accounts.

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges.

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple vulnerabilities were identified due to a lack of proper validation of the length of user-supplied data before copying it to the heap-based buffer.

An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code.

The EyesOfNetwork web interface version 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter.

CVE-2016-4462 allows a malicious, logged-in user to manipulate the URL parameter externalLoginKey, potentially leading to remote code execution via a specially crafted Freemarker template.

A vulnerability in Apache Solr allows attackers to exploit the index replication feature to read files from the server due to improper validation of file names. Versions before 5.5.4 and 6.x before 6.4.1 are susceptible to path traversal attacks.

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.