CVE Vulnerability Catalog

In libsylph/utils.c in Sylpheed through version 3.6, strings are not validated before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 1.19.0 of Reddit Terminal Viewer (RTV), the script scripts/inspect_webbrowser.py does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 4.7.3 of Metview, the etc/ObjectList component does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

In version 8.4.0 of nip2, the boxes.c file does not validate strings before launching the program specified by the BROWSER environment variable, which may allow remote attackers to conduct argument-injection attacks via a crafted URL.

TeX Live through version 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

KildClient version 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

In Apache Fineract versions 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with appropriate permissions can inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on several endpoints is not sanitized and is directly appended to the query.

Podatność w Panda Global Protection 17.0.1 umożliwia wywołanie awarii systemu poprzez wysłanie specjalnie spreparowanego żądania DeviceIoControl do sterownika \.\PSMEMDriver z kodem 0xb3702c04.

Podatność w Panda Global Protection 17.0.1 umożliwia wywołanie awarii systemu poprzez wysłanie specjalnie spreparowanego żądania DeviceIoControl do sterownika \.\PSMEMDriver z kodem 0xb3702c44.

In vBulletin versions up to 5.3.x, there is an unauthenticated deserialization vulnerability that can lead to arbitrary file deletion and, under certain circumstances, code execution. This issue arises from the unsafe usage of PHP's unserialize() function in the cacheTemplates() method of the vB_Library_Template class, which is publicly exposed.

vBulletin versions up to 5.3.x on Windows allows remote PHP code execution due to the accessibility of a require_once call with an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname. The blocking of ../ traversal does not apply to ..\, allowing for exploitation of this vulnerability.

CVE-2017-7738 is an Information Disclosure vulnerability in Fortinet FortiOS versions 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, and 5.2 and below, allowing an admin user with super_admin privileges to view current SSL VPN web portal session info, which may contain user credentials.

In Octopus Deploy before version 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access.

IBM Tivoli Monitoring V6 6.2.2.x contains a vulnerability that could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. An attacker could exploit this vulnerability to execute arbitrary code or cause the application to crash.

Entrepreneur Dating Script version 2.0.1 has an SQL Injection vulnerability via the marital, gender, country, or profileid parameter in the search_result.php file.

Vulnerability in MikroTik RouterBOARD versions v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service (DoS) by connecting to TCP port 53 and sending data starting with many null ('\0') characters. The issue is likely related to DNS handling.

Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker with the appropriate permissions can execute arbitrary code on systems running a vulnerable version of Bamboo Server.

There is a possibility of double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags. An attacker with restricted administrative rights to Bamboo can exploit this vulnerability to execute arbitrary Java code on systems running a vulnerable version of Bamboo.

Basic Job Site Script version 2.0.5 has a SQL Injection vulnerability via the keyword parameter to /job.

Resume Clone Script version 2.0.5 has a SQL Injection vulnerability via the id parameter in the preview.php file.