CVE Vulnerability Catalog

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.

Buffer overflow in the mp_override_legacy_irq() function in the Linux kernel through version 3.2 allows local users to gain privileges via a crafted ACPI table.

The acpi_ns_terminate() function in the Linux kernel before version 4.12 does not flush the operand cache, leading to a kernel stack dump. This allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism.

IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.

IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in getxenmetrics.php via the element parameter.

The get2post.php file in IDERA Uptime Monitor 7.8 has a directory traversal vulnerability in the file_name parameter.

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service via a large XML document.

OrientDB versions up to 2.2.22 do not enforce privilege requirements during 'where', 'fetchplan', or 'order by' usage, allowing remote attackers to execute arbitrary OS commands via a crafted request.

In dotCMS version 4.1.1, there is an arbitrary file upload vulnerability that allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter. This can lead to arbitrary code execution by requesting the .jsp file at an /assets URI.

The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script.

A SIGFPE error occurs in the box_blur_line function of rsvg-filter.c in GNOME librsvg version 2.40.17 during an attempt to parse a crafted SVG file, due to incorrect protection against division by zero.

IBM InfoSphere Master Data Management Server versions 11.0 - 11.6 stores user credentials in plain text, which can be read by a local user.

IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

The Screensavercc component in eLux RP before version 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.

The XSS Protection API module in Apache Sling before version 1.0.12 uses an insecure SAX parser to validate the input string, allowing for XXE attacks in scripts using this method.

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

Geneko GWR routers allow directory traversal attacks starting with a /../ substring, enabling unauthenticated access to the configuration file.

In ImageMagick before version 7.0.6-1, there is a vulnerability in coders/jpeg.c that allows remote attackers to cause an application crash (denial of service) or possibly have unspecified other impact via JPEG data that is too short.