CVE Vulnerability Catalog

PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.

SQL injection vulnerability in A-Reserve and A-Reserve for MT versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

SQL injection vulnerability in A-Member and A-Member for MT versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command.

Indeo Otter through 1.7.4 mishandles a '</script>' substring in an initial DP payload, allowing remote attackers to cause a denial of service (crash) or possibly have unspecified other impact.

Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters.

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution.

Adobe Flash Player has a memory corruption vulnerability in the text handling function that could be exploited for arbitrary code execution. This affects version 26.0.0.151 and earlier.

A vulnerability in Cisco WebEx Network Recording Player allows for remote code execution affecting ARF and WRF files. A remote attacker could exploit this by sending a malicious ARF or WRF file to a user and convincing them to launch it.

A vulnerability exists in Cisco WebEx Network Recording Player that allows remote code execution through malicious ARF or WRF files. An attacker could exploit this by convincing a user to launch such a file.

A remote code execution vulnerability exists in Cisco WebEx Network Recording Player related to ARF and WRF files. A remote attacker could exploit this by providing a malicious ARF or WRF file to a user, potentially causing the player to crash or allowing arbitrary code execution on the user's system.

A 'Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability' exists in Cisco WebEx Network Recording Player for ARF and WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file, leading to player crashes or arbitrary code execution on the user's system.

A vulnerability in Cisco WebEx Network Recording Player allows for remote code execution related to ARF and WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file, potentially causing the player to crash or allowing arbitrary code execution on the user's system.

A denial of service vulnerability exists in Cisco WebEx Network Recording Player related to ARF and WRF files. A remote attacker could exploit this by providing a malicious ARF or WRF file, which could cause the player to crash or, in some cases, allow arbitrary code execution on the user's system.

Splunk Web in Splunk Enterprise versions 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when SAML authType is enabled, mishandles SAML, allowing remote attackers to bypass intended access restrictions or conduct impersonation attacks.

Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless of the provided password.