CVE Vulnerability Catalog

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters. Versions SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior are affected by this vulnerability.

An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. An authenticated user may modify application files to escalate privileges.

A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. An attacker with a specially crafted packet could overflow the fixed length buffer, potentially allowing remote code execution.

A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The affected versions include Developer Edition v9.01.00 and earlier, as well as Free Standard Edition v9.01.00 and earlier.

A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation.

A vulnerability in a script file installed as part of the Cisco Policy Suite (CPS) Software distribution could allow an authenticated, local attacker to escalate their privilege level to root. The issue is due to incorrect sudoers permissions on the script file.

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning allows an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks.

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session.

In MODX Revolution before version 2.5.7, a user with file upload permissions can execute arbitrary code by uploading a file named .htaccess.

In MODX Revolution before version 2.5.7, when using PHP 5.3.3, an attacker can include and execute arbitrary files on the web server due to insufficient validation of the action parameter in setup/index.php, leading to a directory traversal attack.

In WordPress before version 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF vulnerability.

In WordPress before version 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.

In WordPress before version 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.

In WordPress before version 4.7.5, there is improper handling of post meta data values in the XML-RPC API.

libxml2 version 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. The issue exists due to an incomplete fix for CVE-2016-1839.

libxml2 version 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash.

libxml2 version 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c may strcat two more characters to the buffer without checking if the size allows it.

A buffer overflow was discovered in the libxml2 library in the xmlSnprintfElementContent function, which can lead to writing data beyond allocated memory. The issue arises when the buffer length check does not account for the updated length after appending the prefix.

A vulnerability in MikroTik Version 6.38.5 allows an unauthenticated remote attacker to exhaust all available CPU by flooding UDP packets on port 500, preventing the affected router from accepting new connections.

The readelf.c in GNU Binutils as of 2017-04-12 has a 'shift exponent too large for type unsigned long' issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.