CVE Vulnerability Catalog

NVIDIA Linux GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, as well as the Linux for Tegra (L4T) driver before R21.2 and Chrome OS driver before R40, allow remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code via a crafted GLX indirect rendering protocol request.

The Digicom DG-5514T ADSL router with firmware 3.2 generates predictable session IDs, allowing remote attackers to gain administrator privileges via a brute force session hijacking attack.

The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, and in versions 2.2.x through 2.3.x and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) via a crafted .cine file, potentially leading to other unspecified impacts.

The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via an IDAT before an IHDR in a PNG file.

The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before version 2.1.6 and in versions 2.2.x through 2.3.x and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service via out-of-bounds heap access, potentially leading to other unspecified impacts related to LJIF tags in an MJPEG file.

UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.

UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".

A stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

A stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

A heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils version 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

The setup_group function in bfd/elf.c in libbfd in GNU binutils version 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php.

CVE-2014-9347 is an SQL injection vulnerability in dosearch.php in phpMyRecipes version 1.2.2 that allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.

Versions 6.6 and earlier of Guruperl.net Advertise With Pleasure! Professional (AWP PRO) contain an SQL injection vulnerability. Remote attackers can execute arbitrary SQL commands via the group_id parameter in a list_zone action to cgi/client.cgi.

The current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter.

Multiple off-by-one errors in the jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn functions in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, leading to a heap-based buffer overflow.

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009 and other models and versions allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.

Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in various commands.

Emerson Process Management ROC800 RTU with software version 3.50 and earlier, DL8000 RTU with software version 2.30 and earlier, and ROC800L RTU with software version 1.20 and earlier allow remote attackers to execute arbitrary commands via a TCP replay attack.