CVE Vulnerability Catalog

An issue was discovered in Pivotal PCF Elastic Runtime in versions 1.8.x prior to 1.8.29 and 1.9.x prior to 1.9.7, allowing an authorized user to take over another user's account. This can lead to account lockout and potential privilege escalation.

Apache NiFi versions before 0.7.4 and 1.x before 1.3.0 do not set the response header that tells browsers to only allow framing with the same origin.

In version 1.0.28 of the libsndfile library, there is an error in the 'aiff_read_chanmap()' function that can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to discover passwords by sending the username parameter along with an empty password parameter and reading the HTML source code of the response.

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php.

Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.

In Open Ticket Request System (OTRS) versions 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission can open a specific URL in a browser to gain administrative privileges and full access to the system.

The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file.

The hidden-service feature in Tor before version 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.

The hidden-service feature in Tor before version 0.3.0.8 allows a denial of service (assertion failure and daemon exit) via a malformed BEGIN cell.

The vulnerability in the Simeji for Windows installer allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

The vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) version 1.0.2 allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in TKY2JGD (TKY2JGD1379.EXE) version 1.3.79 allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in PatchJGD (Hyoko) version 1.0.1 allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in PatchJGD (PatchJGD101.EXE) version 1.0.1 allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The installer of Houkokusyo Sakusei Shien Tool has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2207 describes an untrusted search path vulnerability in the installer of SaAT Personal version 1.0.10.272 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2206 describes an untrusted search path vulnerability in the installer of SaAT Netizen version 1.2.10.510 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

SQL injection vulnerability in Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.