CVE Vulnerability Catalog

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network.

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.

SQL injection vulnerability in the rate_picture function in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a comparison of a non-numeric value that begins with a digit.

IBM Security AppScan Enterprise versions before 8.5 IFix 002, 8.6 IFix 004, 8.7 IFix 004, 8.8 iFix 003, 9.0.0.1 iFix 003, and 9.0.1 iFix 001 are vulnerable to remote code execution via a crafted executable file in an archive.

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 and CENTUM VP, as well as Exaopc, does not require authentication, allowing remote attackers to read arbitrary files, write to arbitrary files, and obtain sensitive database-location information.

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

A use-after-free vulnerability in the process_nested_data function in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object.

Multiple stack-based buffer overflows in ntpd in NTP before version 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet. These issues are related to the crypto_recv function when using the Autokey Authentication feature, the ctl_putdata function, and the configure function.

The ntp-keygen in NTP before version 4.2.7p230 uses a weak RNG seed, making it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

The config_auth function in ntpd in NTP before version 4.2.7p11 improperly generates a key when an auth key is not configured. This makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

In Innominate mGuard devices with firmware before 7.6.6 and 8.x before 8.1.4, remote authenticated admins can obtain root privileges by changing a PPP configuration setting.

The radius_get_attribute function in Ettercap 0.8.1 performs an incorrect cast, allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, leading to a stack-based buffer overflow.

Ettercap version 0.8.1 does not validate certain return values, allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted data passed to the parse_line or dissector_imap functions.

A heap-based buffer overflow in the nbns_spoof function in Ettercap 0.8.1 can be exploited by remote attackers. Attackers can cause a denial of service or potentially execute arbitrary code by sending a large netbios packet.

An integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code. This can occur in several functions, including dissector_dhcp, dissector_gg, and dissector_TN3270.

GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label.

The dissector_postgresql function in Ettercap before version 0.8.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted password length, which triggers a 0 character to be written to an arbitrary memory location.

Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual length of the password.

Buffer overflow in Allied Telesis devices such as AR440S, AR441S, AR442S, and others with firmware before version 2.9.1-21 allows remote attackers to execute arbitrary code via a crafted HTTP POST request.

The ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of 'password' for the admin account, making it easier for remote attackers to gain access via a request to home_loggedout.php.