CVE Vulnerability Catalog

The DNS packet parser in YADIFA before version 2.2.6 does not check for the presence of infinite pointer loops, which can lead to it entering an infinite loop. This can cause high CPU usage and makes the server unresponsive.

There is a cross-site request forgery (CSRF) vulnerability in the REST API in IPython 2 and 3. An attacker can exploit this flaw to perform unauthorized actions on behalf of the user.

FreeIPA might display user data improperly via vectors involving non-printable characters.

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.

The Helpdesk Pro plugin before version 1.4.0 for Joomla! contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the ticket_code, email, or filter_order parameters.

A use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS may allow remote attackers to execute arbitrary code.

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). After logging in, they can read, write to the file system, or execute any code.

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). The attacker can make a user connected to the repeater click on a malicious link that will log into the telnet and infect the device with malicious code.

There is a LFD (local file disclosure) vulnerability on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.

Polycom RealPresence Resource Manager before version 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.

Polycom RealPresence Resource Manager (RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.

Polycom RealPresence Resource Manager (RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.

CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available.

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 allow remote attackers to spoof session cookies, potentially leading to PHP object injection attacks. This issue arises from the use of standard string comparison operators to compare cryptographic hashes.

A buffer overflow vulnerability was discovered in Perl before versions 5.24.3-RC1 and 5.26.1-RC1 in the S_grok_bslash_N function in regcomp.c. This allows a remote attacker to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.

In Perl 5 before version 5.24.3-RC1 and 5.26.x before 5.26.1-RC1, a heap-based buffer overflow vulnerability was discovered in the S_regatom function in regcomp.c. An attacker can remotely cause a denial of service (DoS) by sending a regular expression containing the '\N{}' escape sequence with the case-insensitive modifier.

Astaro Security Gateway (ASG) version 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx.

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.

The Basic authentication code in the WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its logs, potentially leading to the execution of arbitrary commands.