CVE Vulnerability Catalog

An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.

Jasypt before 1.9.2 allows a timing attack against the password hash comparison.

In Pegasus Mail (Pmail) version 4.72 build 572, there is a vulnerability that allows code execution via a crafted ssgp.dll file installed locally. Clicking on a mailto: link on a remote web page can trigger the attack if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function.

Cisco Configuration Manager version 3.0, bundled in Secure Bytes Secure Cisco Auditor, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname.

CVE-2017-9100 affects D-Link DIR-600M devices with firmware 3.04, where remote attackers can bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt.

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space.

The /admin/loginc.php file in Allen Disk 1.6 does not check if isset($_SESSION['captcha']['code']) == 1, allowing CAPTCHA bypass by emptying $_POST['captcha'].

The reg.php file in Allen Disk 1.6 does not check if isset($_SESSION['captcha']['code'])==1, allowing CAPTCHA to be bypassed via an empty $_POST['captcha'].

PlaySMS version 1.4 allows remote code execution due to the execution of PHP code in the name of an uploaded .php file. The issue arises from a combination of unrestricted file upload and code injection.

An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, the software creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators.

EMC Isilon OneFS versions 8.0.1.0, 8.0.0.0 - 8.0.0.2, 7.2.1.0 - 7.2.1.3, and 7.2.0.x are affected by an NFS export vulnerability. After upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports.

The server in Dropbear before version 2017.75 might allow post-authentication root remote code execution due to a double free in cleanup of TCP listeners when the -a option is enabled.

The tcp_v6_syn_recv_sock function in the Linux kernel through version 4.11.1 mishandles inheritance, allowing local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

The dccp_v6_request_recv_sock function in the Linux kernel through version 4.11.1 mishandles inheritance, allowing local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

The sctp_v6_create_accept_sk function in the Linux kernel through version 4.11.1 mishandles inheritance, allowing local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

The IPv6 fragmentation implementation in the Linux kernel through version 4.11.1 does not consider that the nexthdr field may be associated with an invalid option. This allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.

A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests.