CVE Vulnerability Catalog

The Host Control web service in SAP NetWeaver AS JAVA versions 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request.

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call.

The getUserzoneCookie function in Kaltura before version 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, allowing remote attackers to bypass an intended protection mechanism.

The wiki_decode function in the Kaltura admin panel before version 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

In the medialibrary component in QNAP NAS version 4.3.3.0229, an unauthenticated remote attacker can execute arbitrary system commands as the root user of the NAS application.

The WP Fastest Cache plugin before version 0.8.3.5 contains multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php. This allows remote attackers to hijack the authentication of unspecified victims for certain requests.

Pydio (formerly AjaXplorer) before version 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, leading to OS command injection vulnerabilities.

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

Cisco Cloud Web Security before version 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods.

CVE-2014-9619 describes an unrestricted file upload vulnerability in Netsweeper that allows remote authenticated users with admin privileges to execute arbitrary PHP code by uploading a file with a double extension.

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page.

Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.

eDeploy allows remote attackers to execute arbitrary code by leveraging HTTP to download files.

The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites.

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource, allowing ordinary users to download configuration files. This can lead to the theft of sensitive information such as administrator accounts and passwords.

Versions of Apache Tomcat from 7.0.0 to 7.0.80 have a vulnerability that allows bypassing security constraints and viewing the source code of JSPs for resources served by VirtualDirContext using a specially crafted request.

Apache Solr's Kerberos plugin can be configured to use delegation tokens, allowing an application to reuse the authentication of an end-user or another application. There are two issues with this functionality that may lead to a leak of security configuration.