CVE Vulnerability Catalog

The spikekill.php file in Cacti before version 1.1.16 may allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

The csv_log_html function in the edih_csv_inc.php file in OpenEMR version 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.

ConnectWise Manage version 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an email address setting.

Techroutes TR 1803-3G Wireless Cellular Router/Modem devices version 2.4.25 lack protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering.

IBM i OSPF versions 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity.

IBM Tivoli Endpoint Manager could allow an unauthorized user to consume all resources and crash the system.

IBM InfoSphere Master Data Management Server versions 11.0, 11.3, 11.4, 11.5, and 11.6 are vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

The uploadImage.php in ProjeQtOr before version 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data.

A length validation flaw in eapmd5pass 1.4 leads to out-of-bounds read and write. A remote attacker could exploit this flaw to crash the eapmd5pass process by generating specially crafted network traffic.

An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.

An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.

CVE-2017-11757 involves a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13, allowing remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The issue occurs after the server-client encryption key exchange.

MEDHOST Connex contains a hard-coded Mirth Connect admin credential used for customer management access. An attacker with knowledge of the hard-coded credential and the ability to communicate with the Mirth Connect management console may intercept sensitive patient information.

The ExifImageFile::readDQT function in OpenExif 2.1.4 allows remote attackers to cause a denial of service via a crafted jpg file, leading to heap-based buffer over-read and application crash.

The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, making it easier for remote attackers to obtain network access by reading a beacon frame.

The firmware of Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices contains a vulnerability that allows remote attackers to execute arbitrary code via a specific, but undisclosed, exposed service. The issue pertains only to a single service that is unnecessarily exposed.

The Comcast firmware on Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices does not include the HTTPOnly flag in a Set-Cookie header for administration applications. This increases the risk that remote attackers can access potentially sensitive information via script access to cookies.

The Comcast firmware on Arris TG1682G devices allows configuration changes via CSRF attacks.

The Comcast firmware on Cisco DPC3939B devices allows configuration changes via CSRF attacks.