CVE Vulnerability Catalog

An arbitrary file upload vulnerability in TeamPass before version 2.1.27.9 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.

A vulnerability in libvirtd when configured by OSP director to use TLS transport defaults to the same certificate authority as other services. The lack of additional authentication allows these services to connect to libvirtd, which is equivalent to root access.

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. This affects Hipchat for Mac desktop clients from version 4.0 up to but not including 4.30.

A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center.

In Zulip Server before 1.7.1, a vulnerability in the invitation system allows an authorized user from one realm on the server to create a user account in any other realm.

A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 allows arbitrary code execution when parsing a maliciously crafted yaml Open-API specification. This particularly affects the 'generate' and 'validate' commands in swagger-codegen.

A command injection vulnerability has been identified in the evince application when printing to PDF using a filename. This affects versions earlier than 3.25.91.

In versions of typed-function before 0.10.6, there is a vulnerability allowing arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name may lead to unauthorized code execution.

math.js versions before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

math.js versions before 3.17.0 have an arbitrary code execution vulnerability in the JavaScript engine. Creating a typed function with JavaScript code in the name could lead to unauthorized code execution.

GitPHP by xiphux is vulnerable to OS Command Injections, which may lead to unauthorized command execution on the server.

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property (disabled by default) can be vulnerable to malicious EL expressions in view states that process form submissions without explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971.

In version 1.1.0 of Credhub-release from Cloud Foundry Foundation, access control lists (ACLs) improperly enforced permissions for the CredHub interpolate endpoint. This allowed authenticated applications to view all credentials within the CredHub installation.

In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, authentication is allowed with an arbitrary password when the username is correct. This occurs when no additional attributes are bound and using LDAP BindAuthenticator with DefaultTlsDirContextAuthenticationStrategy.

A deserialization vulnerability was discovered in Pivotal Spring Security versions 4.2.0.RELEASE through 4.2.2.RELEASE and 5.0.0.M1, which could lead to arbitrary code execution when default typing in Jackson is enabled. The issue allows the use of unknown 'deserialization gadgets' if certain conditions are met.

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci.

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.

The InLinks plugin version up to 1.1 for WordPress has an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL commands via the 'keyword' parameter.