CVE Vulnerability Catalog

In module imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is smaller than expected, which may lead to buffer overflow during copying. If the image is remote, it may lead to remote code execution or denial of service.

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray can cause an infinite loop, allowing for a DoS attack.

IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories.

GitLab Community Edition and Enterprise Edition before versions 8.17.8, 9.0.13, 9.1.10, 9.2.10, 9.3.10, and 9.4.4 may allow remote attackers to execute arbitrary code via a crafted SSH URL during project import.

The RealTime RWR-3G-100 Router Firmware Version Ver1.0.56 is affected by a CSRF attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.

An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.

An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.

Synology Download Station versions 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 use weak permissions (0777) for the ui/dlm/btsearch directory, allowing remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.

The CVE-2017-11150 vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. This vulnerability may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code.

A heap-based buffer overflow vulnerability has been discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. This vulnerability may cause a crash or allow remote code execution.

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. This vulnerability may cause a crash or allow remote code execution.

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. This could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.

An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. This could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.

Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 allow remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.

The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd has a vulnerability that allows remote attackers to cause a denial of service through uninitialized memory access, leading to application crashes.

The Symantec Messaging Gateway before version 10.6.3-267 is vulnerable to a cross site request forgery (CSRF) attack, which allows unauthorized commands to be transmitted from a user's trusted browser.

Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contain an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data drawing position definition. Successful exploitation could lead to arbitrary code execution.

Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier have an exploitable memory corruption vulnerability in the Enhanced Metafile Format (EMF) parser. Successful exploitation could lead to arbitrary code execution.