CVE Vulnerability Catalog

A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in external device function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in the FTP service in QNAP QTS could allow remote attackers to execute arbitrary code on NAS devices.

Versions of puppetlabs-mysql from 3.1.0 to 3.6.0 allow remote attackers to bypass authentication by creating a database account without a password when the 'mysql_user' user parameter contains a host with a netmask.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability.

WTF/wtf/FastBitVector.h in WebKit, distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact. The issue arises from an improper call to the resizeSlow function, which mishandles cases where the old array length is greater than the new array length.

There is an SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager, Storage Profiler, and Backup Profiler before version 5.1.2. This allows remote attackers to execute arbitrary SQL commands via the loginName field.

CVE-2017-6094 vulnerability allows forging 'chk' values for MAC addresses, enabling access to configuration settings of other subscribers. These settings may contain sensitive information such as credentials for VoIP services.

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. This vulnerability may allow an attacker to execute code remotely or crash the device.

In BlogoText versions up to 3.7.6, a vulnerability allows attackers to bypass intended access restrictions via the email address field in the validate_form_preferences function in admin/preferences.php.

The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks. An example is a Resolv::Hosts::new argument beginning with a '|' character.

Paid To Read Script version 2.0.5 has a SQL injection vulnerability via the id parameter in referrals.php.

Paid To Read Script version 2.0.5 has an authentication bypass vulnerability in the admin panel via a direct request, as demonstrated by the fn parameter in admin/viewvisitcamp.php and the uid parameter in admin/userview.php.

An issue was discovered on Ichano AtHome IP Camera devices that allows a remote, unauthenticated user on the LAN to execute arbitrary commands. This is done through the 'noodles' binary running on port 1300, which requires the <system> XML element to specify the command.

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaint~EditConfig request, which reaches an older version of a West Wind Web Connection HTTP service.

Zivif PR115-204-P-RS web cameras version V2.3.4.2103 contain a hard-coded password 'cat1029' for the root user. The SONIX operating system setup makes this password unchangeable, allowing access to the device via a TELNET session.

CVE-2017-17106 allows unauthenticated remote attackers to obtain credentials for Zivif PR115-204-P-RS V2.3.4.2103 webcams via a standard HTTP request. The vulnerability exists due to a lack of authentication checks in requests to CGI pages.

Zivif PR115-204-P-RS web cameras in versions V2.3.4.2103 and V4.7.4.2121 (and possibly in between versions) are vulnerable to unauthenticated, blind remote command injection via CGI scripts used in the web interface.

The AccessKeys AccessPress Anonymous Post Pro plugin for WordPress versions up to 3.1.9 has an issue with improper input sanitization. This allows an attacker to override settings for allowed file extensions and upload file size, leading to the ability to upload any files to the server.