CVE Vulnerability Catalog

GNOME Shell 3.14.x before 3.14.1 does not limit the aggregate memory consumption of active PrtSc requests, allowing nearby attackers to execute arbitrary commands on an unattended workstation.

CVE-2014-2217 describes a vulnerability in the RadAsyncUpload control in RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2, allowing remote attackers to write to arbitrary files.

Multiple buffer overflows in AllegroSoft RomPager, used in Huawei Home Gateway products and other vendors, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization.

AllegroSoft RomPager version 4.34 and earlier, used in Huawei Home Gateway products and other vendors, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, known as the 'Misfortune Cookie' vulnerability.

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

The QSEECOM driver for Linux kernel 3.x has a vulnerability that does not validate certain offset, length, and base values within an ioctl call. This allows attackers to gain privileges or cause a denial of service via a crafted application.

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network.

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.

SQL injection vulnerability in the rate_picture function in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a comparison of a non-numeric value that begins with a digit.

IBM Security AppScan Enterprise versions before 8.5 IFix 002, 8.6 IFix 004, 8.7 IFix 004, 8.8 iFix 003, 9.0.0.1 iFix 003, and 9.0.1 iFix 001 are vulnerable to remote code execution via a crafted executable file in an archive.

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 and CENTUM VP, as well as Exaopc, does not require authentication, allowing remote attackers to read arbitrary files, write to arbitrary files, and obtain sensitive database-location information.

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

A use-after-free vulnerability in the process_nested_data function in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object.

Multiple stack-based buffer overflows in ntpd in NTP before version 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet. These issues are related to the crypto_recv function when using the Autokey Authentication feature, the ctl_putdata function, and the configure function.

The ntp-keygen in NTP before version 4.2.7p230 uses a weak RNG seed, making it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

The config_auth function in ntpd in NTP before version 4.2.7p11 improperly generates a key when an auth key is not configured. This makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

In Innominate mGuard devices with firmware before 7.6.6 and 8.x before 8.1.4, remote authenticated admins can obtain root privileges by changing a PPP configuration setting.

The radius_get_attribute function in Ettercap 0.8.1 performs an incorrect cast, allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, leading to a stack-based buffer overflow.

Ettercap version 0.8.1 does not validate certain return values, allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted data passed to the parse_line or dissector_imap functions.