CVE Vulnerability Catalog

The ThinkPad USB 3.0 Ethernet Adapter driver (part number 4X90E51405) was found to contain a privilege escalation vulnerability that could allow a local user to execute arbitrary code with administrative or system level privileges.

The vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

baserCMS versions 3.0.14 and earlier, 4.0.5 and earlier allow an attacker to execute arbitrary PHP code on the server via unspecified vectors.

baserCMS versions 3.0.14 and earlier, 4.0.5 and earlier allow remote attackers to delete arbitrary files via unspecified vectors when the 'File' field is being used in the mail form.

CVE-2017-10839 is an SQL injection vulnerability in SEO Panel prior to version 3.11.0 that allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

The vulnerability in Optimal Guard 1.1.21 and earlier related to an untrusted search path allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The 'Dokodemo eye Smart HD' SCR02HD firmware version 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors.

The electronic authentication system based on the commercial registration system 'The CRCA user's Software' version 1.8 and earlier has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The vulnerability in Security Setup Tool across all versions allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in Flets Install Tool in all versions distributed until August 8, 2017, allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in Photo Collection PC Software version 4.0.2 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

Multiple temporary file creation vulnerabilities in pki-core version 10.2.0.

Improper verification of cryptographic signature exists in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50.

A DLL Hijacking vulnerability exists in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.

Huawei Video Content Management (VCM) before version V100R001C10SPC001 does not properly authenticate online user identities and privileges, allowing remote authenticated users to gain privileges and perform operations as another user via a crafted message.

Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for 'plcmbtoesrv.exe', allowing local users to gain privileges via a Trojan horse file.

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.

The id3v2AddAudioDuration function in LAME 3.99.5 has a NULL Pointer Dereference, allowing attackers to trigger Denial of Service by passing NULL as the first argument.