CVE Vulnerability Catalog

Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.

Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter to download.php.

PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup packet.

The asset discovery scanner in AlienVault OSSIM before version 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.

Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors.

IBM SDK, Java Technology Edition is vulnerable to XML External Entity Injection (XXE) when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

IBM Distributed Marketing and Marketing Platform versions 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application.

The Metadata Anonymisation Toolkit (MAT) versions 0.6 and 0.6.1 fails to properly perform 'Clean metadata' actions invoked from the Nautilus contextual menu, allowing attackers to obtain sensitive information from files that were intended to be cleaned.

Two errors in the 'asn1_find_node()' function in GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow. An attacker can trick a user into processing a specially crafted assignments file via the asn1Coding utility.

The TNEFFillMapi function in lib/ytnef.c in libytnef through version 1.9.2 does not ensure a nonzero count value before a certain memory allocation, allowing remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted tnef file.

Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site may send an HTML response that performs arbitrary actions on archiva services with the same rights as the active archiva session.

The vulnerability in Empirical Project Monitor - eXtended in all versions allows remote attackers to gain privileges via a malicious DLL in an unspecified directory.

The CVE-2016-7804 vulnerability in 7 Zip for Windows version 16.02 and earlier involves an untrusted search path that allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

The CSRF vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack user authentication and perform unintended operations.

The vulnerability in the installer of e-Tax Software in all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

An untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

The CSRF vulnerability in L-04D firmware versions V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.

An issue was discovered in certain Apple products, including iOS before 10.3.2, tvOS before 10.2.1, and watchOS before 3.2.2, involving the 'AVEVideoEncoder' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products, including iOS before 10.3.2, tvOS before 10.2.1, and watchOS before 3.2.2, related to the 'AVEVideoEncoder' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.