CVE Vulnerability Catalog

SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.

Lenovo Updates (not Lenovo System Update) has a remote code execution vulnerability that allows man-in-the-middle attackers to execute arbitrary code.

Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 have a vulnerability that allows local users to escalate privileges and execute code with elevated privileges.

Synology Photo Station before version 6.3-2958 allows local users to gain privileges by leveraging setuid execution of the 'synophoto_dsm_user --copy-no-ea' command.

Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.

dde-daemon, the daemon process of DDE (Deepin Desktop Environment) versions 15.0 through 15.3, runs with root privileges and hardly identifies the user calling the function through D-Bus. Anyone can change the grub config, potentially creating a backdoor or escalating privileges.

The dwarf_macro5.c file in libdwarf before version 20160923 contains a vulnerability that allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 without a DW_AT_name.

CVE-2017-7185 is a use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in the Cesanta Mongoose Embedded Web Server Library. It allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.

NetApp Clustered Data ONTAP versions 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors.

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.

Botan before 1.11.22 improperly validates certificate paths, allowing remote attackers to cause a denial of service via a certificate with a loop in the certificate chain.

Botan versions 1.11.x before 1.11.22 are vulnerable to a padding-oracle attack that allows remote attackers to decrypt TLS ciphertext data using CBC ciphersuites.

In ImageMagick version 7.0.4-9, an infinite loop can occur due to a floating-point rounding error in some color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.

The Linux kernel up to version 4.10.9 has a vulnerability that allows attackers to cause a denial of service by triggering their own callback, leading to infinite recursion. This issue is present in the crypto/ahash.c file.

In Asterisk Open Source versions 13.x before 13.14.1 and 14.x before 14.3.1, as well as Certified Asterisk 13.13 before 13.13-cert3, remote code execution can occur due to a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.

CVE-2017-6190 is a vulnerability in the web interface of the D-Link DWR-116 device with firmware before V1.05b09 that allows remote attackers to read arbitrary files via a '..' in a 'GET /uir/' request.

Impala in CDH versions 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

In KeePassX before version 0.4.4, a cleartext copy of password data is created upon canceling an XML export action. This allows attackers to obtain sensitive information by reading the .xml dotfile.

Opmantek NMIS before 4.3.7c has command injection vulnerabilities via the tools.pl CGI script using commands like man, finger, ping, trace, and nslookup. Versions before 8.5.12G may also be affected in non-default configurations.

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def.