CVE Vulnerability Catalog

iBaby M6 allows remote attackers to obtain sensitive information related to the ibabycloud.com service.

Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.

The TRENDnet WiFi Baby Cam TV-IP743SIC has a password of 'admin' for the backdoor root account.

Vision Critical before May 30, 2014, allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files.

The HE-AAC+ Codec (libaacplus) version 2.0.2 has an assertion failure that may allow remote attackers to cause an application crash (denial of service) or potentially have unspecified other impact via a crafted audio file.

The HE-AAC+ Codec (libaacplus) version 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause application crashes or potentially other unspecified impacts via a crafted audio file.

The au_channel.h file in the HE-AAC+ Codec (libaacplus) version 2.0.2 has a signed integer overflow, which may allow remote attackers to cause application crashes or potentially have unspecified other impacts via a crafted audio file.

LibTIFF version 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

LibTIFF version 4.0.7 has an undefined behavior issue related to 'shift exponent too large for 64-bit type long', which may lead to application crashes.

LibTIFF version 4.0.7 has an undefined behavior issue related to values outside the range of representable values of type unsigned char, which may allow remote attackers to cause application crashes or possibly have unspecified other impacts via a crafted image.

LibTIFF version 4.0.7 has an undefined behavior issue when values are outside the range of representable values of type short. This may allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

The tif_dirread.c file in LibTIFF 4.0.7 may have a divide-by-zero error that allows remote attackers to cause application crashes via a crafted image.

The tif_dirread.c in LibTIFF 4.0.7 has an undefined behavior issue related to 'outside the range of representable values of type float', which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

LibTIFF version 4.0.7 has an undefined behavior issue related to 'outside the range of representable values of type float', which may lead to application crashes or other unspecified impacts via a crafted image.

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path.

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, which may cause it to reboot due to a series of rapid requests. This affects all firmware versions prior to V3.03 BN 830.

CVE-2017-0583 is a privilege escalation vulnerability in the Qualcomm CP access driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it first requires compromising a privileged process and due to specific details of the vulnerability that limit its impact.

An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities.

CVE-2017-0581 is a privilege escalation vulnerability in the Synaptics Touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.