CVE Vulnerability Catalog

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, allowing remote attackers to conduct cross-site request forgery (CSRF) attacks and obtain sensitive information via a crafted HTTP request.

Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input.

Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.

An absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before version 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.

Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data stream due to improper use of cryptography.

ASUS Japan WL-330NUL devices with firmware before version 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors.

An absolute path traversal vulnerability exists in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE, allowing remote attackers to read arbitrary files via a full pathname in the getpage parameter.

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code.

The file-execution functionality in WinRAR before version 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename selected by the user.

The samldb_check_user_account_control_acl function in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during the creation of machine accounts. This allows remote authenticated users to bypass intended access restrictions.

The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.

The vulnerability in ldb before version 1.1.24, used in the AD LDAP server in Samba 4.x before version 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, involves mishandling string lengths. This allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets.

In Samba versions 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, a vulnerability allows remote attackers to bypass intended file-access restrictions via a symlink pointing outside of a share when certain substring relationships in share names exist.

Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.

Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. Similar issues exist in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.

Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.

Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux, and in Adobe AIR before 20.0.0.233, allows attackers to execute arbitrary code.

Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.

Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.324 for Flash Player and before 20.0.0.233 for Adobe AIR.