CVE Vulnerability Catalog

A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in external device function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in the FTP service in QNAP QTS could allow remote attackers to execute arbitrary code on NAS devices.

Versions of puppetlabs-mysql from 3.1.0 to 3.6.0 allow remote attackers to bypass authentication by creating a database account without a password when the 'mysql_user' user parameter contains a host with a netmask.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability.

CVE-2017-17410 allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability, meaning the target must visit a malicious page or open a malicious file.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CVE-2017-17408 allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability, meaning the target must visit a malicious page or open a malicious file.

GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a 'url =' line in a .lfsconfig file within a repository.

Bus Booking Script has a SQL Injection vulnerability via the sp_id parameter in admin/view_seatseller.php and the memid parameter in admin/view_member.php.

Piwigo version 2.9.2 is vulnerable to Cross-Site Request Forgery (CSRF) via specific URL parameters. An attacker can coerce an admin user into performing unintended actions.

WTF/wtf/FastBitVector.h in WebKit, distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact. The issue arises from an improper call to the resizeSlow function, which mishandles cases where the old array length is greater than the new array length.

In Netwide Assembler (NASM) version 2.14rc0, there is a heap-based buffer over-read that can lead to a remote denial of service attack. This issue is related to a while loop in the paste_tokens function in asm/preproc.c.

In Golden Frog VyprVPN before version 2.15.0.5828 for macOS, there is a vulnerability related to an unprotected XPC service in the vyprvpnservice launch daemon. This allows attackers to update the OpenVPN configuration and the arguments passed to the OpenVPN binary.

The HMAC implementation in the Linux kernel before version 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, potentially leading to a kernel stack buffer overflow.

The Salsa20 encryption algorithm in the Linux kernel before version 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker to use the AF_ALG-based skcipher interface to cause denial of service or unspecified other impacts.

A memory overflow vulnerability in SMBv1 exists in EMC Data Domain DD OS affecting versions prior to 5.7.5.6 for the DD OS 5.7 family, prior to 6.0.2.9 for the DD OS 6.0 family, prior to 6.1.0.21 for the DD OS 6.1 family, all versions for the Virtual Edition 2.0 family, prior to 3.0 SP2 Update 1 for the Virtual Edition 3.0 family, and prior to 3.1 Update 2 for the Virtual Edition 3.1 family. An attacker may remotely shut down the SMB service and Active Directory authentication.

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks. The absence of these protections exposes web applications to unauthorized actions, especially destructive ones.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.