CVE Vulnerability Catalog

The check_secret function in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service via a user name which does not exist in the secrets file, leading to an infinite loop and CPU consumption.

The lib/rrd.php file in Cacti versions 0.8.7g, 0.8.8b, and earlier contains a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters.

In Django versions before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2, the FilePathField, GenericIPAddressField, and IPAddressField model field classes do not properly perform type conversion. This may allow remote attackers to have unspecified impact related to 'MySQL typecasting.'

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, allowing attackers to execute arbitrary code via a crafted application.

WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, allowing attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.

CVE-2014-2892 involves a heap-based buffer overflow in the get_answer function in mmsh.c in libmms before version 0.6.4. This allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.

SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the u parameter, related to the getFileName function.

Python versions before 3.3.4 RC1 allow remote attackers to cause a denial of service via a file size value larger than the size of the zip file in functions related to reading and extracting zip files.

FitNesse Wiki versions 20131110, 20140201, and earlier allow remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.

The Network Analysis tab in ASUS RT-AC68U and other RT series routers with firmware before version 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).

The getObjectByToken function in the Pimcore_Tool_Newsletter module in versions 1.4.9 through 2.0.0 does not properly handle objects obtained by unserializing Lucene search data. This allows remote attackers to conduct PHP object injection attacks and execute arbitrary code.

Unspecified vulnerability in HP Network Node Manager i (NNMi) versions 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors.

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before version 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to ports 4999 or 80.

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors.

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before version 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.

In Asterisk Open Source versions 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, as well as Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, there is a vulnerability that allows remote attackers to cause a denial of service (stack consumption) and possibly execute arbitrary code via an HTTP request with a large number of Cookie headers.

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, and F-Secure Email and Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands.

A stack-based buffer overflow in OpenJPEG before version 1.5.2 allows remote attackers to exploit unspecified vectors in the files lib/openjp3d/opj_jp3d_compress.c, bin/jp3d/convert.c, or lib/openjp3d/event.c.

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact, leading to a heap-based buffer overflow.