CVE Vulnerability Catalog

LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php.

A SQL injection vulnerability exists in the forgotpass component of Tiny Tiny RSS 17.4 in classes/handler/public.php via the login parameter.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before version 03.2.00. Design flaws allow an attacker to remotely activate rules on the firewall and connect to any TCP port of a protected asset, thus bypassing the firewall.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before version 03.2.00 related to improper handling of the mbap.length field in ModBus packets. This allows an attacker to send malformed packets to a protected asset, bypassing function code filtering.

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, allowing remote attackers to read or replace core system files, including those used for authentication (such as passwd and shadow). This can be exploited to gain full root level control of the device.

The hw/input/ps2.c file in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution.

QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes, which can lead to remote code execution. This can result in the complete takeover of the server hosting QuickerBB.

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, as well as other sensitive information.

Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.

The samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec, potentially leading to arbitrary code execution.

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) before version 2.7.1 related to parsing numeric header fields in SIP messages, which may lead to buffer overflow.

CPython (also known as Python) up to version 2.7.13 is vulnerable to a heap-based buffer overflow caused by an integer overflow in the PyString_DecodeEscape function in stringobject.c, potentially leading to arbitrary code execution.

Redis-store versions <=1.3.0 allows unsafe objects to be loaded from Redis.

CVE-2017-1000232 describes a double-free vulnerability in str2host.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.

CVE-2017-1000231 describes a double-free vulnerability in parse.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.

Nodejs ejs versions older than 2.5.3 are vulnerable to remote code execution due to weak input validation in the ejs.renderFile() function.

In Creolabs Gravity version 1.0, there is a heap buffer overflow vulnerability that may lead to code execution. By creating a large loop while pushing data to a buffer, the bounds checking of that buffer can be bypassed.

In Creolabs Gravity version 1.0, a Use-After-Free vulnerability exists that may lead to code execution. The issue involves the 'sublexer' pointer being freed and then accessed in the code, resulting in unsafe memory access.

October CMS version 412 is vulnerable to file path modification in asset move functionality, potentially allowing the creation of malicious files on the server.