CVE Vulnerability Catalog

A stack-based buffer overflow in the normify function in the rlm_pap module in FreeRADIUS may lead to denial of service and potentially allow arbitrary code execution via a long password hash.

Linksys SMART WiFi firmware on EA2700, EA3500, E4200v2, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900 devices before specified versions allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/HTTP request.

The lazy_bdecode function in BitTorrent bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, triggering an out-of-bounds read, related to 'Improper Indexing.'

The execSetResults.php file in TestLink before version 1.9.13 has a vulnerability that allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter_result_result parameter.

Directory traversal vulnerability in EspoCRM before version 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter to install/index.php.

Buffer overflow in ALLPlayer versions 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.

BSS Continuity CMS 4.2.22640.0 has an SQL injection vulnerability in getnode.aspx that allows remote attackers to execute arbitrary SQL commands via the nodeid parameter.

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.

Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before version 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins.

The MySQL database in McAfee Network Data Loss Prevention (NDLP) before version 9.3 does not require a password, making it easier for remote attackers to gain access.

CVE-2014-4877 in GNU Wget before version 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, leading to arbitrary code execution. This issue occurs in a LIST response that references the same filename in two entries, one of which indicates that the filename is for a symlink.

Integer overflow in the object_custom function in var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.

Etiko CMS has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. The attack can be carried out via the page_id parameter in loja/index.php or the article_id parameter in index.php.

CVE-2012-5580 describes a format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1, which may allow attackers to cause a denial of service (crash) and potentially execute arbitrary code via format string specifiers in a proxy name.

In server/sv_main.c of Quake3 Arena, used in ioquake3 before r1762, OpenArena, Tremulous, and other products, remote attackers can cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

A vulnerability in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via remote file inclusion. The issue exists in wp-links/links.all.php, where attackers can manipulate the $abspath variable.

A stack-based buffer overflow in rtsold in FreeBSD from version 9.1 through 10.1-RC2 can be exploited by remote attackers. Attackers can cause a denial of service (crash) or potentially execute arbitrary code by sending crafted DNS parameters in a router advertisement message.

EGroupware Enterprise Line before version 1.1.20140505, EGroupware Community Edition before version 1.8.007.20140506, and EGroupware before version 14.1 beta allow remote authenticated administrators to execute arbitrary PHP code via crafted callback values to the call_user_func PHP function.

The from_yaml method in serializers.py in Django Tastypie before version 0.9.10 does not properly deserialize YAML data, allowing remote attackers to execute arbitrary Python code.

The emitters.py file in Django Piston before version 0.2.3 and in 0.2.x before 0.2.2.1 has an issue with deserializing YAML data, allowing remote attackers to execute arbitrary Python code.