CVE Vulnerability Catalog

PHPDocX, used in ownCloud Server before version 5.0.15 and 6.0.x before version 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

PHPExcel versions before 1.8.0, used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, do not disable external entity loading in libxml. This allows remote attackers to read arbitrary files, cause denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

A vulnerability in the Dell ML6000 and Quantum Scalar i500 systems allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

SQL injection vulnerability in the Contextual Related Posts plugin before version 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

The default configuration in the Red Hat openstack-neutron package before version 2013.2.3-7 does not properly set a configuration file for rootwrap, allowing remote attackers to gain privileges via a crafted configuration file.

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

A stack-based buffer overflow in BOINC versions 6.10.58 and 6.12.34 allows remote attackers to exploit it via multiple file_signature elements.

DataLife Engine (DLE) version 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.

Symfony versions 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x are vulnerable to remote attacks that allow arbitrary PHP code execution via a serialized PHP object in the Yaml::parse or Yaml\Parser::parse functions.

The Yaml::parse function in Symfony 2.0.x before version 2.0.22 allows remote attackers to execute arbitrary PHP code via a PHP file, which is a different vulnerability than CVE-2013-1397.

A stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.

SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter.

SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.

There is an SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 versions 4.3.0.4 and 4.4.0.2. Remote attackers can execute arbitrary SQL commands via unspecified parameters.

Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail.

Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.

CVE-2014-2352 allows the directory specifier to be used to traverse the directory path, potentially enabling an attacker to access a limited number of hardcoded file types. Further exploitation may lead to a denial-of-service condition in the web server component.

Multiple untrusted search path vulnerabilities in setuid and setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.