CVE Vulnerability Catalog

A stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution.

An out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause memory corruption leading to remote code execution.

An out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. A specially crafted XLS file can cause memory corruption leading to remote code execution.

An out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption leading to remote code execution.

An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution.

A vulnerability in the DOC file parser in Apache OpenOffice Writer before version 4.1.4, specifically in the ImportOldFormatStyles function, allows attackers to craft malicious documents that cause application crashes and potentially enable arbitrary code execution.

LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php.

A vulnerability in OpenOffice's PPT file parser before version 4.1.4, specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause application crashes and memory corruption, potentially leading to arbitrary code execution.

On the Vonage VDV-23 115 home router version 3.2.11-0.9.40, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot.

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file.

A vulnerability in the DOC file parser in OpenOffice Writer before version 4.1.4, specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that can lead to application crashes and potentially arbitrary code execution.

A SQL injection vulnerability exists in the forgotpass component of Tiny Tiny RSS 17.4 in classes/handler/public.php via the login parameter.

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature does not sanitize filenames, potentially leading to executing any escape sequences in the terminal.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before version 03.2.00. Design flaws allow an attacker to remotely activate rules on the firewall and connect to any TCP port of a protected asset, thus bypassing the firewall.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before version 03.2.00 related to improper handling of the mbap.length field in ModBus packets. This allows an attacker to send malformed packets to a protected asset, bypassing function code filtering.

The Apache OpenOffice installer (versions prior to 4.1.3) for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned by a file that impersonates a dynamic-link library that the installer depends upon.

In the Laravel framework up to version 5.5.21, remote attackers can obtain sensitive information, such as passwords, via a direct request to the /.env URI. The issue concerns the writeNewEnvironmentFileWith function, which does not restrict the permissions of the .env file.

In Bftpd before version 4.7, there is a memory leak in the file rename function.

Icinga Core through version 1.14.0 initially executes bin/icinga as root but supports configuration options where this file is owned by a non-root account. This allows local users to gain privileges by leveraging access to this non-root account.

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, allowing remote attackers to read or replace core system files, including those used for authentication (such as passwd and shadow). This can be exploited to gain full root level control of the device.