CVE Vulnerability Catalog

GlassFish Server version 4.1 is vulnerable to a Directory Traversal attack that can be exploited by both authenticated and unauthenticated users. The attack involves sending a specially crafted HTTP GET request.

Versions 0.3.0 and older of mixlib-archive from Chef Software are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using '..' in tar archive entries.

GNOME Web (Epiphany) versions 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions are vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to information disclosure in the web publishing plugins, potentially resulting in plaintext transmission of passwords and oauth tokens.

LogicalDoc Community Edition 7.5.3 and prior contain an incorrect access control which could lead to privilege escalation.

LogicalDoc Community Edition version 7.5.3 and prior is vulnerable to XXE when indexing XML documents.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a DoS attack in the replication status by using a specially crafted table name.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a weakness that allows a user with appropriate permissions to connect to an arbitrary MySQL server.

A weakness was discovered where an attacker can inject arbitrary values into the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a DoS weakness in the table editing functionality.

Audacity versions 2.1.2 through 2.3.2 is vulnerable to Dll Hijacking in avformat-55.dll, resulting in arbitrary code execution.

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.

FedMsg version 0.18.1 and older is vulnerable to a message validation flaw, resulting in message validation not being enabled even if configured to be on.

CVE-2017-0152 is a remote code execution vulnerability in the Microsoft scripting engine that improperly handles objects in memory in Microsoft browsers. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.

In Foreman before 6.2, when the SSH service is enabled on discovered nodes, discovery-debug displays the root password in plaintext in the system journal during login.

Foreman versions from 1.1 to before 1.9.0-RC1 do not redirect HTTP requests to HTTPS when the require_ssl setting is enabled. This allows remote attackers to obtain user credentials via a man-in-the-middle attack.

The weblog page template in Apache Roller versions 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).

The read_user_chunk_callback function in coders/png.c in ImageMagick 7.0.6-1 Q16 from June 21, 2017 (beta) has memory leak vulnerabilities via crafted PNG files.

The HTTP/2 handling code in Apache httpd 2.4.26 has an issue that may lead to accessing memory after it has been freed, especially when closing many connections under stress. This can result in erratic application behavior.

CVE-2017-6249 is a vulnerability in the NVIDIA sound driver that allows for privilege escalation, enabling a local malicious application to execute arbitrary code within the kernel context. However, it requires compromising a privileged process first.