CVE Vulnerability Catalog

Versions of inspircd in Debian before 2.0.7 have an issue with improper handling of unsigned integers. This vulnerability exists due to an incomplete fix for CVE-2012-1836.

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has 'chown -R' calls for user-writable directory trees, allowing local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link.

The Responsive Image Gallery plugin before version 1.2.1 for WordPress has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the 'id' parameter in an add_edit_theme task on the wpdevart_gallery_themes page in the admin panel.

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor versions 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

Plone versions 3.3.0 through 3.3.6 allow remote attackers to inject headers into HTTP responses.

The MySQL 'root' user in Xsuite 2.x does not have a password set, allowing local users to access databases on the system.

Multiple hardcoded credentials exist in Xsuite 2.x, which may lead to unauthorized access to the system.

The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 do not ensure a unique PLT entry for a symbol. This allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file.

IBM Security Identity Manager Adapters versions 6.0 and 7.0 store user credentials in plain text, which can be read by a local user.

Geminabox before version 0.13.7 has a CSRF vulnerability, which can lead to unintended gem uploads.

The logger plugin in WeeChat before version 1.9.1 has a flaw that allows a crash via invalid date/time specifiers in the strftime function, due to an uninitialized buffer.

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, potentially allowing SQL injection attacks via plugins and themes.

Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code. The attack can be carried out by manipulating parameters in an lpp project file, such as author, name, artist, or default.

Foxit Reader version 8.3.2.25013 and earlier and Foxit PhantomPDF version 8.3.2.25013 and earlier, when running in single instance mode, allow attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file.

DenyAll WAF before version 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php and then reading the iToken field in the reply.

DenyAll WAF before version 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706.

The NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array.

The NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array. This may lead to denial of service or possible escalation of privileges.