CVE Vulnerability Catalog

GNOME Web (Epiphany) versions 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions are vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to information disclosure in the web publishing plugins, potentially resulting in plaintext transmission of passwords and oauth tokens.

LogicalDoc Community Edition 7.5.3 and prior contain an incorrect access control which could lead to privilege escalation.

LogicalDoc Community Edition version 7.5.3 and prior is vulnerable to XXE when indexing XML documents.

SYN Flood or FIN Flood attack in eCos 1 and other versions of embedded devices results in web Authentication Bypass. eCos Embedded Web Servers fail to validate and handle SYN and FIN packets, resulting in no authentication requirement.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a DoS attack in the replication status by using a specially crafted table name.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a weakness that allows a user with appropriate permissions to connect to an arbitrary MySQL server.

A weakness was discovered where an attacker can inject arbitrary values into the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.

phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a DoS weakness in the table editing functionality.

Audacity versions 2.1.2 through 2.3.2 is vulnerable to Dll Hijacking in avformat-55.dll, resulting in arbitrary code execution.

Akeneo PIM CE and EE versions below 1.6.6, 1.5.15, and 1.4.28 are vulnerable to shell injection in mass editing, leading to remote code execution.

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.

ATutor version 2.2.1 and earlier are vulnerable to SQL injection in multiple components, leading to information disclosure, database modification, or potential code execution.

ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application, Module, and Alternative Content components, resulting in privilege escalation.

ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. Additionally, these versions are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.

FedMsg version 0.18.1 and older is vulnerable to a message validation flaw, resulting in message validation not being enabled even if configured to be on.

CVE-2017-0152 is a remote code execution vulnerability in the Microsoft scripting engine that improperly handles objects in memory in Microsoft browsers. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.

A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. This could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user.

The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem. Additionally, if running on a Java VM before 1.3.1, it can execute arbitrary code via a crafted serialized Java object.

In Foreman before 6.2, when the SSH service is enabled on discovered nodes, discovery-debug displays the root password in plaintext in the system journal during login.