CVE Vulnerability Catalog

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to a Read Access Violation on Block Data Move.

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file.

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to possible stack corruption.

Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, which may lead to potential threats.

Intelbras WRN 150 devices allow remote attackers to read the configuration file, enabling authentication bypass via a direct request to cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.

Pulse Secure Pulse One On-Premise version 2.0.1649 and below does not properly validate requests, allowing remote users to query and obtain sensitive information.

In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill, and Gfx::drawForm calls. This is a different vulnerability than CVE-2017-14519.

In Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS, there is a CSRF vulnerability that allows an authenticated user to edit global permissions. An attacker could exploit an IMG element on a wiki page opened by an administrator to assign administrator privileges to every unauthenticated user.

In Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS, there is a CSRF vulnerability that allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element related to tiki-assignuser.php.

FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module.

ERS Data System version 1.8.1.0 allows remote attackers to execute arbitrary code, related to 'com.branaghgroup.ecers.update.UpdateRequest' object deserialization.

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution.

A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution.

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to retrieve or modify storage information.

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30, and 9.40 allows remote users to bypass authentication.

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health allows users to upload unrestricted files in versions 9.26, 9.30, and 9.40.

Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before version 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via incorrect literal handling, leading to CPM stack corruption.

Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE) attacks via vectors involving spreadsheets in OOXML files and XMP metadata in PDF and other file formats.

MultiTech FaxFinder before version 4.1.2 stores passwords in an unencrypted form for the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.