CVE Vulnerability Catalog

Fiyo CMS version 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in the .backup/ directory.

SQL injection vulnerability in the Store Locator plugin versions 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

oVirt versions 3.2.2 through 3.5.0 do not invalidate the REST API session after logout from the webadmin, allowing remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files, potentially leading to denial of service due to resource consumption.

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, allowing remote attackers to execute arbitrary commands via TCP port 23.

E-Sic version 1.0 allows SQL injection via the q parameter in the esiclivre/restrito/inc/lkpcep.php file, which is part of the private search area.

The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before September 25, 2017, mishandles a case where a variable may reside in a register. This allows remote attackers to cause a denial of service or possibly other unspecified impacts via a crafted PDF document.

The wasm_dis function in radare2 version 2.0.0 allows remote attackers to cause denial of service through stack-based buffer over-read, leading to application crash. The attack can be executed using a crafted WASM file that triggers an incorrect r_hex_bin2str call.

In CPUID CPU-Z before version 1.43, there is an arbitrary memory write that leads to privilege escalation. Any program running on the local machine can issue an ioctl 0x9C402430 call to the kernel-mode driver.

In CPUID CPU-Z through version 1.81, there are improper access rights to a kernel-mode driver that can lead to information disclosure or elevation of privileges. An arbitrary read of any physical address via ioctl 0x9C402604 allows any application on Windows, including sandboxed users, to issue an ioctl to this driver without validation.

CVE-2017-15363 is a directory traversal vulnerability in getsource.php in Luracast Restler through version 3.0.0. It allows remote attackers to read arbitrary files via the file parameter.

In the web panel of the Airtame HDMI dongle with firmware before version 3.0, an attacker can set their own session ID via a 'Cookie: PHPSESSID=' header. This can lead to persistent access to the admin panel even after an admin password change.

Apache Solr before 7.1 is vulnerable to remote code execution, which can be exploited via an XXE attack in conjunction with the Config API add-listener command, leading to the RunExecutableListener class.

The firmware of Ruckus Wireless Zone Director Controller and Ruckus Wireless Unleashed AP contains OS Command Injection vulnerabilities. This allows local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, and ZD9.13.0.x below 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes.

CVE-2017-10622 is an authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform that allows a remote unauthenticated attacker to log in as any privileged user. This issue affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3.

Junos OS on SRX series devices does not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks.

CVE-2017-10619 affects Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, and SRX5800 devices when configured in high availability cluster mode with Express Path enabled. Certain multicast packets may cause the flowd process to crash, interrupting traffic and triggering fail-over to the secondary node.