CVE Vulnerability Catalog

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in the VMNAT device. This issue may allow a guest to execute code on the host.

The Flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a modified POST request to internal services, leading to information disclosure.

VMware vCenter Server versions 6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c do not correctly handle specially crafted LDAP network packets, which may allow for remote denial of service.

The CVE-2017-10887 vulnerability in BOOK WALKER for Windows version 1.2.9 and earlier has an untrusted search path that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) before version 2.7.1 related to parsing numeric header fields in SIP messages, which may lead to buffer overflow.

The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution due to a race condition in the plupload_action function in /wp-content/plugins/updraftplus/admin.php before deleting a file associated with the name parameter.

The UpdraftPlus plugin for WordPress through version 1.13.12 has an SSRF vulnerability in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction.

The p_mach.cpp file in UPX 3.94 has a vulnerability that allows remote attackers to cause a denial of service through invalid memory access and application crash by using a crafted Mach-O file. The issue is related to the canPack and unpack functions.

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

CPython (also known as Python) up to version 2.7.13 is vulnerable to a heap-based buffer overflow caused by an integer overflow in the PyString_DecodeEscape function in stringobject.c, potentially leading to arbitrary code execution.

Serendipity version 2.0.3 is vulnerable to a SQL injection in the blog component, resulting in information disclosure.

Codiad (full version) is vulnerable to write anything to the configuration file in the installation, resulting in the upload of a webshell.

Redis-store versions <=1.3.0 allows unsafe objects to be loaded from Redis.

CodeIgniter version 3.1.3, used by the British Columbia Institute of Technology, is vulnerable to HTTP Header Injection in the set_status_header() function under Apache, leading to HTTP Header Injection flaws.

CVE-2017-1000232 describes a double-free vulnerability in str2host.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.

CVE-2017-1000231 describes a double-free vulnerability in parse.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.

The application OpenEMR versions 5.0.0, 5.0.1-dev and prior is affected by a vertical privilege escalation vulnerability. This vulnerability allows authenticated non-administrator users to view and modify information only accessible to administrators.

InvoicePlane version 1.4.10 is vulnerable to an Arbitrary File Upload, allowing an authenticated user to upload a malicious file to the webserver. An attacker can upload a script that can compromise the webserver.

Nodejs ejs versions older than 2.5.3 are vulnerable to remote code execution due to weak input validation in the ejs.renderFile() function.

Nodejs ejs versions older than 2.5.5 are vulnerable to a denial-of-service attack due to weak input validation in the ejs.renderFile() function.