CVE Vulnerability Catalog

The bzread function in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

Skia, as used in Google Chrome before version 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

The backend/Login/load/ script in Shopware before version 5.1.5 allows remote attackers to execute arbitrary code.

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.

The Broadcom Wi-Fi driver for Android, used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.

An integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before version 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.

Versions of Spring AMQP before 1.5.5 contain a vulnerability in the org.springframework.core.serializer.DefaultDeserializer class that allows remote attackers to execute arbitrary code.

ExaGrid appliances with firmware before version 4.8 P26 have a default SSH public key in the authorized_keys file for root, allowing remote attackers to gain SSH access.

ExaGrid appliances with firmware before version 4.8 P26 have a default password (1) inflection for the root account and (2) support for the support account in the web interface, allowing remote attackers to gain administrative access via an SSH or HTTP session.

The Grandstream Wave app version 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which may allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

The auto-provisioning mechanism in the Grandstream Wave app version 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data. This can lead to modification of device functionality and obtaining sensitive information from system logs.

Tenable Appliance versions 3.5 - 4.4.0, and possibly prior versions, contain a flaw in the simpleupload.py script in the Web UI. A remote attacker can inject arbitrary commands through manipulation of the tns_appliance_session_user parameter.

Tenable Appliance version 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for unauthorized manipulation of the admin password.

D-Link DAP-1353 H/W ver. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.

Buffer overflow in D-Link devices DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2660, DAP-2690, DAP-2695, DAP-3320, and DAP-3662 allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.

Netgear WNAP320, WNDAP350, and WNDAP360 before version 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.

Information disclosure in Netgear WN604 before 3.3.3 and WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0, as well as WND930 before 2.0.11 allows remote attackers to read the WPS PIN or passphrase without authentication.

Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.

Session fixation vulnerability in pcsd in pcs versions before 0.9.157.