CVE Vulnerability Catalog

In Qualcomm products with Android releases from CAF using the Linux kernel, there is a potential for kernel memory to be overwritten if an invalid master is sent from userspace.

The Podlove Podcast Publisher plugin version 2.5.3 and earlier has an SQL injection vulnerability in the orderby parameter in contributor_list_table.php, which can be exploited via CSRF.

The Easy Modal plugin before version 2.1.0 for WordPress has an SQL injection vulnerability in an untrash action using the id, ids, or modal parameters to wp-admin/admin.php.

The Easy Modal plugin before version 2.1.0 for WordPress has an SQL injection vulnerability in a delete action using the id, ids, or modal parameters to wp-admin/admin.php.

CVE-2017-12881 describes a cross-site request forgery (CSRF) vulnerability in Spring Batch Admin before version 1.3.0 that allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, including exploiting a file upload vulnerability.

In Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions. This may lead to writing beyond the intended partition.

All Qualcomm products with Android releases from CAF using the Linux kernel have a TOCTOU race condition in Secure UI.

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name.

The CSRF vulnerability in django CMS before version 3.0.14 and 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions.

The OAuth implementation in librest before version 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, allowing remote attackers to cause application crashes by running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in HSDPA.

OpenFire XMPP Server before version 3.10 accepts self-signed certificates, allowing remote attackers to perform unspecified spoofing attacks.

ASUS DSL-N10S devices version V2.1.16_APAC are vulnerable to CSRF attacks, which may lead to unauthorized actions within the system.

ASUS DSL-N10S devices in version V2.1.16_APAC have a privilege escalation vulnerability. A normal user can escalate their privileges and perform administrative actions.

ToMAX R60G R60GV2 devices in version 2.6.3-170330 lack any protection against CSRF attacks.

A heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before version 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code.

Razer Synapse version 2.20.15.1104 and earlier uses weak permissions for the Devices directory, allowing local users to gain privileges via a Trojan horse in the RazerConfigNative.dll or RazerConfigNativeLOC.dll files.

Razer Synapse version 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, allowing local users to gain privileges via a malicious dbghelp.dll file.

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.

The RESTful control interface (RAPI) in Ganeti before version 2.9.7 and in versions 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.