CVE Vulnerability Catalog

The api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.

An issue was discovered on Siemens SICAM RTUs SM-2556 with specific firmware variants that allows unauthenticated remote attackers to execute arbitrary code via the integrated web server.

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware allows low privileged attackers with network access to compromise Oracle Tuxedo. Attackers can gain unauthorized access to critical data and modify it.

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, there is an elevation of privilege vulnerability in the default configuration with QNet enabled that could allow an attacker to access local and remote files or take ownership of files on other QNX nodes.

The csnmp_read_table function in the SNMP plugin in collectd before version 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash.

In Apache CouchDB before version 1.7.0 and 2.x before version 2.1.1, a vulnerability allows submitting _users documents with duplicate 'roles' keys, which can lead to non-admin users being granted admin privileges.

CVE-2017-6274 describes an elevation of Privilege vulnerability in the thermal driver, where missing bounds checks can lead to an out-of-bounds write in the kernel. This issue is rated as moderate.

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) version 8.1 could allow a remote attacker to perform a privilege escalation.

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require strong passwords by default, making it easier for attackers to compromise user accounts.

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. This vulnerability may allow remote code execution with high privileges.

The Recurly Client .NET Library before versions 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery due to incorrect use of 'Uri.EscapeUriString'. This could lead to compromise of API keys or other critical resources.

The Recurly Client Python Library before versions 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource.get' method that could result in compromise of API keys or other critical resources.

The Recurly Client Ruby Library before versions 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource#find' method that could result in compromise of API keys or other critical resources.

The Paperclip gem version 3.1.4 and later has a Server-Side Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.

Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the third-party 'PCRE' product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the '802.1X' component. It allows attackers to have an unspecified impact by leveraging TLS 1.0 support.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the third-party 'file' product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

In CMS Made Simple version 2.1.6, there is a Server-Side Template Injection vulnerability via the cntnt01detailtemplate parameter.