CVE Vulnerability Catalog

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the third-party 'file' product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

In CMS Made Simple version 2.1.6, there is a Server-Side Template Injection vulnerability via the cntnt01detailtemplate parameter.

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in django_make_app 0.1.3, allowing arbitrary Python command execution. An attacker can inject Python code into loaded YAML to trigger this vulnerability.

An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from '~/.confire.yaml' using the yaml.load function, an attacker can inject Python commands, leading to arbitrary command execution.

In Inedo BuildMaster versions before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.

In Joomla! before version 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.

The UserPro plugin before version 4.9.17.1 for WordPress, when used on a site with the 'admin' username, allows remote attackers to bypass authentication and gain administrative access by setting the up_auto_log parameter to 'true' in the QUERY_STRING to the default URI.

Buffer overflow in the SoftConsole client in Avaya IP Office before version 10.1.1 allows remote servers to execute arbitrary code via a long response.

Red Hat JBoss and other Red Hat products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before version 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.

An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before version 2.0.0a12. The use of load instead of safe_load allows for arbitrary Python command execution by injecting code into loaded YAML.

An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before version 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used.

An exploitable vulnerability exists in the YAML parsing functionality in MLAlchemy before version 0.2.2, allowing arbitrary Python command execution due to the use of load instead of safe_load when processing YAML-based queries.

Ingenious School Management System version 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request in /view/friend_profile.php.

A Plaintext Storage of a Password issue was discovered in WebDatorCentral (WDC) versions prior to Version 3.4.0. WDC stores password credentials in plaintext.

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

CVE-2017-2922 describes a memory corruption vulnerability in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can lead to a buffer being allocated with stale pointers, resulting in a use-after-free vulnerability that can be exploited for remote code execution.

CVE-2017-2921 describes a vulnerability in the Websocket protocol implementation of Cesanta Mongoose 6.8 that can lead to heap buffer overflow. A specially crafted websocket packet can cause an integer overflow, resulting in denial of service and potential remote code execution.

CVE-2017-2894 describes a stack buffer overflow vulnerability in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a buffer overflow, leading to remote code execution.