CVE Vulnerability Catalog

An integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before version 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.

ExaGrid appliances with firmware before version 4.8 P26 have a default SSH public key in the authorized_keys file for root, allowing remote attackers to gain SSH access.

The Grandstream Wave app version 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which may allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

The auto-provisioning mechanism in the Grandstream Wave app version 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data. This can lead to modification of device functionality and obtaining sensitive information from system logs.

Tenable Appliance version 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for unauthorized manipulation of the admin password.

D-Link DAP-1353 H/W ver. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.

Information disclosure in Netgear WN604 before 3.3.3 and WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0, as well as WND930 before 2.0.11 allows remote attackers to read the WPS PIN or passphrase without authentication.

Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.

Session fixation vulnerability in pcsd in pcs versions before 0.9.157.

CVE-2016-0720 is a CSRF vulnerability in the pcsd web UI in pcs versions before 0.9.149. It allows attackers to send unauthorized requests on behalf of users.

There is an untrusted search path vulnerability in the installer of PhishWall Client before version 3.7.8.2 for Internet Explorer.

The Akerun - Smart Lock Robot App for iOS before version 1.2.4 does not verify SSL certificates, which may lead to man-in-the-middle attacks.

Android allows users to cause a denial of service.

WonderCMS before 2.0.3 is vulnerable to CSRF due to a lack of a token in an unspecified context.

OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized 'UPDATE dm_dbo.dm_user_s SET user_privileges=16' command, known as an 'RPC save-commands' attack.

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks resulting in XSS, where administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.

A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) allows an authenticated, remote attacker to execute arbitrary commands on an affected system. The issue arises from insufficient sanitization of user-supplied HTTP input.

A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize specific values that are received as part of a user-supplied HTTP request.

A vulnerability in the IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The issue is due to insufficient validation of the XAUTH parameters during IKEv1 negotiation.

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets.