CVE Vulnerability Catalog

The Recurly Client .NET Library before versions 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery due to incorrect use of 'Uri.EscapeUriString'. This could lead to compromise of API keys or other critical resources.

The Recurly Client Python Library before versions 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource.get' method that could result in compromise of API keys or other critical resources.

The Recurly Client Ruby Library before versions 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource#find' method that could result in compromise of API keys or other critical resources.

The private_address_check ruby gem before version 0.4.0 is vulnerable to a bypass due to the use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as blacklisting private network addresses to prevent server-side request forgery.

The Paperclip gem version 3.1.4 and later has a Server-Side Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.

An authentication vulnerability was found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. An attacker could exploit this vulnerability to gain access to additional operations by forging a JSON message.

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, files in encryption zones with world-readable permissions can be localized via YARN's localization mechanism, leading to their storage in a world-readable location.

CVE-2017-10885 describes an untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

I-O DATA DEVICE LAN DISK Connect version 2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.

Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors.

The Apache OpenOffice installers before 4.1.3 contain a defect known as an 'unquoted Windows search path vulnerability'. This requires the PC to have been previously infected by a Trojan Horse application running with administrative privileges.

The 'Kickbase Bundesliga Manager' app before version 2.2.1 is vulnerable to a credentials leak due to transmitting a username and password in cleartext during registration and authentication.

CVE-2017-11169 allows remote authenticated users to obtain root privileges on iBall iB-WRA300N3GT devices by leveraging a guest/user account to submit a modified privilege parameter to /form2userconfig.cgi.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Quick Look' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the third-party 'PCRE' product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

An issue was discovered in macOS before version 10.13.1 in the 'Kernel' component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Sandbox' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in macOS versions before 10.13.1 related to the 'Kernel' component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary.

An issue was discovered in certain Apple products, including macOS before 10.13.1, involving the 'CFNetwork' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.