CVE Vulnerability Catalog

Mobile Devices (MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x store SSH private keys that are identical across different customers' installations. This makes it easier for remote attackers to gain access by leveraging knowledge of a private key from another installation.

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, making it easier for remote attackers to gain root access by connecting to the web administration interface.

IBM Systems Director versions 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0, and 6.3.6.0 improperly processes events, allowing local users to gain privileges via unspecified vectors.

HP CentralView versions 11.1, 11.2, 11.3 and 4.1, 4.2, 4.3, 2.0, 2.1, 2.1, 2.2, 2.3, 2.1, 2.2, 2.3, 2.0 and 2.1 allow remote attackers to obtain sensitive information via unspecified vectors. This is a different vulnerability than CVE-2015-5407 and CVE-2015-5408.

An unspecified vulnerability in HP Operations Manager i (OMi) versions 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors.

Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, allowing remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.

In Java Method Server (JMS) in EMC Documentum Content Server before versions 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, remote authenticated users can gain super-user privileges by leveraging the ability to read a log file containing a login ticket.

Java Method Server (JMS) in EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, allowing remote authenticated users to execute arbitrary code with super-user privileges via a custom script.

EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not restrict object types, allowing remote authenticated users to run save RPC commands with super-user privileges and execute arbitrary code.

EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, allowing remote authenticated sysadmins to gain super-user privileges and bypass intended restrictions on data access and server actions.

EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x before 4.0.8 and 4.1.x before 4.1.3, as well as RSA BSAFE SSL-C version 2.8.9 and earlier, have a vulnerability that allows remote attackers to cause a daemon crash by sending a ClientKeyExchange message with a length of zero when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled.

EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x before 4.0.8 and 4.1.x before 4.1.3, as well as RSA BSAFE SSL-C version 2.8.9 and earlier, do not properly restrict TLS state transitions. This allows remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the 'FREAK' issue.

EMC RSA BSAFE Micro Edition Suite and other RSA products do not enforce certain constraints on certificate data, allowing remote attackers to bypass a fingerprint-based certificate blacklist protection mechanism.

EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C version 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks, leading to a loss of forward secrecy.

The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file.

SQL injection vulnerability in the WP Symposium plugin before version 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter in get_album_item.php.

The snmp_pdu_parse function in net-snmp version 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails. This allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php.