CVE Vulnerability Catalog

An issue was discovered in heinekingmedia StashCat before version 1.5.18 for Android related to the lack of certificate pinning. As a result, an attacker could issue a certificate for the backend, and the application would not notice it.

An issue was discovered in heinekingmedia StashCat related to the lack of integrity and authenticity checks in the protocol. Affected versions are 1.7.5 for Android, 0.0.80w for Web, and 0.0.86 for Desktop.

Potrace version 1.14 has a heap-based buffer over-read vulnerability in the interpolate_cubic function in mkbitmap.c.

The csv_log_html function in the edih_csv_inc.php file in OpenEMR version 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.

ConnectWise Manage version 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an email address setting.

Techroutes TR 1803-3G Wireless Cellular Router/Modem devices version 2.4.25 lack protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering.

IBM i OSPF versions 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity.

IBM Tivoli Endpoint Manager could allow an unauthorized user to consume all resources and crash the system.

IBM InfoSphere Master Data Management Server versions 11.0, 11.3, 11.4, 11.5, and 11.6 are vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

The uploadImage.php in ProjeQtOr before version 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data.

A length validation flaw in eapmd5pass 1.4 leads to out-of-bounds read and write. A remote attacker could exploit this flaw to crash the eapmd5pass process by generating specially crafted network traffic.

An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.

An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.

The ExifImageFile::readDQT function in OpenExif 2.1.4 allows remote attackers to cause a denial of service via a crafted jpg file, leading to heap-based buffer over-read and application crash.

The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, making it easier for remote attackers to obtain network access by reading a beacon frame.

The Comcast firmware on Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices does not include the HTTPOnly flag in a Set-Cookie header for administration applications. This increases the risk that remote attackers can access potentially sensitive information via script access to cookies.

The Comcast firmware on Arris TG1682G devices allows configuration changes via CSRF attacks.

The Comcast firmware on Cisco DPC3939B devices allows configuration changes via CSRF attacks.

The Comcast firmware on Cisco DPC3939 and DPC3941T devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials.