CVE Vulnerability Catalog

The Graphics component in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application.

Microsoft Excel 2007 SP3 and Microsoft Outlook 2010 SP2, 2013 SP1, and 2016 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted document.

A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.

Certain Brother devices have an authorization issue that involves including a valid AuthCookie cookie in the HTTP response to a failed login attempt.

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed by registering this dissector.

In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed by avoiding use of a memcmp for potentially shorter strings.

The Trend Micro Threat Discovery Appliance 2.6.1062r1 has a directory traversal vulnerability that allows a remote, unauthenticated attacker to delete arbitrary files as root by processing a session_id cookie. This can be exploited to bypass authentication or cause a DoS.

A command execution flaw exists in the Trend Micro Threat Discovery Appliance 2.6.1062r1 with the timezone parameter in the admin_sys_time.cgi interface.

Unrestricted File Upload exists in BigTree CMS before version 4.2.17. An attacker can upload an 'xxx.php[space]' file, allowing them to bypass a safety check and execute arbitrary code.

CVE-2017-7694 vulnerability in Symphony CMS allows remote code execution through content.blueprintsdatasources.php. An authenticated attacker can enter PHP code in the datasource editor or event editor, leading to webshell access.

A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The issue is documented in SAP Security Note 2419592.

All versions of Schneider Electric's homeLYnk Controller prior to version 1.5.0 contain a command injection vulnerability.

A heap-based buffer overflow exists in QEMU when built with the Q35-chipset-based PC system emulator. This vulnerability may lead to unauthorized memory access.

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allowing remote attackers to execute arbitrary JavaScript.

A use-after-free vulnerability exists in AnimationController::endAnimationUpdate in Google Chrome, potentially leading to unauthorized memory access.

Multiple SQL injection vulnerabilities in EyesOfNetwork (EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via specified parameters.

The vulnerability in setroubleshoot allows local users to bypass the intended container protection mechanism and execute arbitrary commands. This can be achieved by triggering an SELinux denial using a crafted file name or crafted fields in an XML document.

The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.

The fix_lookup_id function in sealert in setroubleshoot before version 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name.

The allow_execmod plugin for setroubleshoot before version 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename.