CVE Vulnerability Catalog

In Exponent CMS version 2.4.0, in the file /framework/modules/core/controllers/expHTMLEditorController.php, untrusted input is used to construct a table name, leading to SQL Injection vulnerability.

In Exponent CMS 2.4.0 in the file /framework/modules/ecommerce/controllers/orderController.php, untrusted input is passed into the selectObjectsBySql method. This method uses the injectProof method to prevent SQL injection, but this filter can be easily bypassed, leading to information disclosure.

Exponent CMS 2.4 uses PHP reflection to call methods of a controller class, leading to issues with user permission verification. Due to case insensitivity in method names, an attacker can bypass permission checks by using appropriately capitalized method names.

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service (DoS) condition. This affects Cisco ASR 5500 devices with DPC2 running StarOS 18.0 or later.

A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database.

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to elevate the privilege level associated with their session.

MuJS before version a0ceaf5050faf419401fe1b83acfa950ec8a8a89 by Artifex Software, Inc. allows context-dependent attackers to obtain sensitive information by using a crafted JavaScript approach, related to a 'Buffer Over-read' issue.

Exponent CMS version 2.3.9 suffers from a SQL injection vulnerability in '/framework/modules/help/controllers/helpController.php' affecting the version parameter. The impact is Information Disclosure.

Exponent CMS version 2.3.9 suffers from a SQL injection vulnerability in '/expPaginator.php' affecting the 'order' parameter.

The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a directory traversal attack.

A vulnerability on Samsung Mobile M (6.0) devices exists due to improper restriction of external access to SystemUI activities, leading to a SystemUI crash and device restart.

CVE-2015-8968 vulnerability in git-fastclone before version 1.0.1 allows arbitrary shell command execution from .gitmodules. An attacker can instruct a user to run a recursive clone from a repository they control, enabling the execution of malicious code.

A vulnerability in ISC BIND 9.x before version 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service via a DNAME record in the answer section of a response to a recursive query.

A memory corruption in the IPsec code path of Brocade NetIron OS could lead to denial of service via line card reset. Attackers can exploit specially crafted IPsec control packets to trigger this issue.

An out-of-bounds read vulnerability in Foxit Reader and PhantomPDF before version 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document.

CVE-2016-8877 is a heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before version 8.1 on Windows. It allows remote attackers to execute arbitrary code via a crafted JPEG2000 image embedded in a PDF document.

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before version 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document.

Foxit Reader for Mac version 2.1.0.0804 and earlier and Foxit Reader for Linux version 2.1.0.0805 and earlier had a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code.