CVE Vulnerability Catalog

In ImageMagick 7.0.7-16 Q16 x86_64, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

An issue was discovered in Valve Steam Link build 643 where root passwords longer than 8 characters are truncated due to the default use of the DES algorithm.

An issue was discovered in Valve Steam Link build 643 related to the availability of the SSH daemon. When the SSH daemon is enabled for local development, the device is publicly accessible via IPv6 TCP port 22 by default, making it easier for remote attackers to gain access by guessing 24 bits of the MAC address and attempting a root login.

Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.

The JEXTN FAQ Pro extension version 4.0.0 for Joomla! has a SQL Injection vulnerability via the id parameter in a view=category action.

Vanguard Marketplace Digital Products PHP version 1.4 allows arbitrary file upload via an 'Add a new product' or 'Add a product preview' action, which can make a .php file accessible under an uploads/ URI.

Vanguard Marketplace Digital Products PHP version 1.4 is vulnerable to SQL Injection via the PATH_INFO parameter in the /p URI.

The JEXTN Video Gallery extension version 3.0.5 for Joomla! has a SQL Injection vulnerability via the id parameter in a view=category action.

The 'JEXTN Question And Answer' extension version 3.1.0 for Joomla! has an SQL Injection vulnerability via the an parameter in a view=tags action or the ques-srch parameter.

The JBuildozer extension version 1.4.1 for Joomla! has a SQL Injection vulnerability via the appid parameter in an entriessearch action.

Artifex MuPDF before version 1.12.0 mishandles certain length changes during a repair operation in pdf/pdf-write.c, which can lead to buffer overflow and application crash.

The Linux kernel in versions 4.9.x through 4.9.71 has a vulnerability that does not check the relationship between pointer values and the BPF stack. This can lead to denial of service (integer overflow or invalid memory access) or other unspecified impacts.

The check_stack_boundary function in the Linux kernel through version 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by mishandling invalid variable stack read operations.

The Linux kernel through version 4.14.8 contains a vulnerability that allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact due to the lack of stack-pointer alignment enforcement.

The Linux kernel up to version 4.14.8 has a vulnerability that allows local users to cause a denial of service (memory corruption) by improperly using pointers instead of scalars.

The Linux kernel through version 4.14.8 has a vulnerability that allows local users to cause a denial of service through integer overflow and memory corruption by leveraging unrestricted integer values for pointer arithmetic.

The Linux kernel through version 4.14.8 has a vulnerability that allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations.

The Linux kernel through version 4.14.8 has a vulnerability that allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops.

An issue was discovered in Asterisk versions 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older that causes a crash when processing certain SIP messages without a contact header. This issue occurs only when the PJSIP channel driver is used.

CVE-2017-17849 describes a buffer overflow vulnerability in GetGo Download Manager version 5.3.0.2712 and earlier. This could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.