CVE Vulnerability Catalog

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.

SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.

In gtbn.py in Plone before 4.2.3 and 4.3 before beta 1, remote authenticated users with certain permissions can bypass the Python sandbox and execute arbitrary Python code via unspecified vectors.

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.

The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via incorrect validation of the HTTP Authorization header.

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, allowing remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.

The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12 does not verify X.509 certificates from SSL servers when using HTTPS, allowing man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.

Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors.

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops.

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents.

The Linux kernel before version 2.6.36 has a flaw in include/linux/netdevice.h that incorrectly uses macros for netdev_printk and its related logging implementation. This allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.

The SMB2_tcon function in the Linux kernel before version 3.16.3 allows remote CIFS servers to cause a denial of service through NULL pointer dereference, leading to client system crashes. It may also lead to unspecified other impacts by deleting the IPC$ share during DFS referral resolution.

The file net/ceph/auth_x.c in Ceph, as used in the Linux kernel before version 3.16.3, does not properly validate auth replies, allowing remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.

In Ceph, used in the Linux kernel before version 3.16.3, memory allocation errors are not properly handled, potentially leading to system crashes or other unspecified impacts via a long unencrypted auth ticket.

Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.

The assoc_array_gc function in the associative-array implementation in the Linux kernel before version 3.16.3 does not properly implement garbage collection, which may lead to system crashes or other unspecified impacts.

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted environment.