CVE Vulnerability Catalog

IrfanView version 4.44 for 32-bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.

IrfanView version 4.44 for 32-bit systems allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.

XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue relates to how data from the faulting address controls the subsequent write address.

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27.

The CSRF vulnerability in IBM Security Identity Manager versions 5.1, 6.0, and 7.0 allows remote attackers to hijack user authentication, potentially leading to cross-site scripting attacks, web cache poisoning, or other unspecified impacts.

OpenWebif version 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py. The issue occurs when the URL points to an attacker-controlled site, allowing for the introduction of a malicious package.

ImageMagick version 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.

The Crony Cronjob Manager plugin for WordPress before version 0.4.7 has a CSRF vulnerability via the name parameter in an action=manage&do=create operation, allowing for the injection of XSS sequences.

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.

In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.

Heap-based Buffer Overflow on Tenda W15E devices before version 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.

Directory Traversal vulnerability on Tenda W15E devices before version 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.

NexusPHP version 1.5.beta5.20120707 has an SQL Injection vulnerability in forummanage.php via the sort parameter in an editforum action. This is a different vulnerability than CVE-2017-12981.

A vulnerability was discovered in SAP E-Recruiting (versions 605-617) that allows attackers to register and confirm email addresses they do not have access to. This can be achieved by bypassing the confirmation process, leading to the potential blocking of legitimate user registrations.

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26) regarding remote file inclusion in the Connectors module. This allows authenticated users to include remotely accessible system files via a module=CallRest&url query string.

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 in the Documents and Emails modules that allows an authenticated user to perform SQL injection. An attacker could exploit these vulnerabilities by sending a crafted SQL request.

An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.

An authentication bypass vulnerability on UTStar WA3002G4 modems allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source.

The libarchive library version 3.3.2 has an off-by-one error in the read_header function affecting UTF-16 names in RAR archives. This can lead to an out-of-bounds read in the archive_read_format_rar_read_header function.