CVE Vulnerability Catalog

An Unverified Password Change issue was discovered in the ProMinent MultiFLEX M10a Controller web interface. The application does not require the user to know the original password when setting a new password, allowing an authenticated attacker to change a user's password.

A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. The application does not verify string size before copying to memory, which may allow an attacker to crash the application or run arbitrary code.

CVE-2017-15539 describes an SQL Injection vulnerability in the zorovavi/blog application identified up to October 17, 2017. This vulnerability affects the id parameter in recept.php.

NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component that allows writing to a memory location outside the intended boundary of the buffer. This may lead to denial of service or possible escalation of privileges.

Versions 8.0.0 and 8.0.1 of TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server with the Administrator Service enabled may be vulnerable. This allows any authenticated user to gain administrative control over Managed File Transfer web applications.

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.

The Lenovo Service Framework Android application uses a set of nonsecure credentials for integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks, potentially leading to remote code execution.

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.

Debian ftpsync before 20171017 does not use the rsync --safe-links option, allowing remote attackers to conduct directory traversal attacks via a crafted upstream mirror.

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code.

The web administrative portal in Zhone zNID GPON 2426A before version S3.0.501 is vulnerable to remote attacks that allow arbitrary command execution via shell metacharacters in the ipAddr parameter to zhnping.cmd.

In the web administrative portal of Zhone zNID GPON 2426A before version S3.0.501, a session key is placed in a URL, allowing remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf.

X2Engine X2CRM before version 4.0 has an unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method. This allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request.

The make_temporary_filename function in perltidy version 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to the use of the tmpnam function.

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.

Huawei USG9560/9520/9580 devices before V300R001C01SPC300 are vulnerable to an attack that can lead to memory leaks or denial of service. Attackers can exploit a crafted website to trigger these issues.

In gollum before version 3.1.1 and gollum-lib before version 4.0.1, the presence of the string 'master' in wiki documents allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.

The getid3 library in MediaWiki before versions 1.24.1, 1.23.8, 1.22.15, and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Aircrack-ng before version 1.2 Beta 3 has a vulnerability that allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.