CVE Vulnerability Catalog

Versions of curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service through out-of-bounds access, leading to application crashes.

The FTP wildcard function in curl and libcurl before version 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.

The NTLM authentication feature in curl and libcurl before version 7.57.0 on 32-bit platforms allows attackers to cause a denial of service through integer overflow and resultant buffer overflow, leading to application crash.

EMC RSA Authentication Agent API version 8.5 for C and RSA Authentication Agent SDK version 8.6 for C allow attackers to bypass authentication, known as an 'Error Handling Vulnerability.'

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass.

A customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time-limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised.

A buffer overflow vulnerability was discovered in EMC ScaleIO 2.0.1.x in the SDBG service, which may allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.

Use-after-free vulnerability in Samba 4.x before version 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. This affects Hipchat for Mac desktop clients from version 4.0 up to but not including 4.30.

math.js versions before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

math.js versions before 3.17.0 have an arbitrary code execution vulnerability in the JavaScript engine. Creating a typed function with JavaScript code in the name could lead to unauthorized code execution.

GitPHP by xiphux is vulnerable to OS Command Injections, which may lead to unauthorized command execution on the server.

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

The receive_msg function in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, allowing remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml.

The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.

In libxml2 before version 2.9.5, there is an issue with handling parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the storage of backup files. These files contain sensitive information insecurely, as passwords are stored without encryption and without salt for hashing.

The MIT Kerberos 5 (krb5) library up to version 1.15.2 mishandles Distinguished Name (DN) fields, allowing remote attackers to execute arbitrary code or cause application crashes via buffer overflow.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.