CVE Vulnerability Catalog

The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg versions 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file.

MetInfo through versions 5.3.17 accepts the same CAPTCHA response for 120 seconds, making it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream.

The psi/ztoken.c file in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, allowing remote attackers to cause application crashes or potentially other unspecified impacts via a crafted PostScript document.

The Boozt Fashion application before version 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network due to the lack of SSL.

NetComm Wireless 4GT101W routers with software version V1.1.8.8 are vulnerable to CSRF attacks, allowing the firewall to be disabled via the administration.html page. The lack of protective tokens makes these attacks easy to execute.

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. This acceptance of different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers.

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers, making it vulnerable to padding oracle attacks, particularly with CBC mode.

Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL.

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.

The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service via a crafted stream, leading to segmentation violation and application crash.

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted jpg file.

There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that may lead to remote denial of service via crafted input.

CVE-2017-11681 vulnerability in Hashtopussy 0.4.0 concerns incorrect access control, allowing remote authenticated users to perform actions reserved for administrative roles, as demonstrated by an action=createVoucher request to agents.php.

Hashtopussy 0.4.0 has a Cross-Site Request Forgery (CSRF) vulnerability that allows an admin password change via users.php.

Hashtopus 1.5g has a Cross-Site Request Forgery (CSRF) vulnerability via the password parameter to admin.php in an a=config action.

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.

The traverseStrictSanitize function in AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, allowing remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the admin_name array parameter to admin_dir/login.php.