CVE Vulnerability Catalog

Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops.

The Tapatalk plugin versions 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin contain multiple SQL injection vulnerabilities. Attackers can remotely execute arbitrary SQL commands via a crafted xmlrpc API request.

Apache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via unspecified vectors.

The ultimate-form-builder-lite plugin before version 1.3.7 for WordPress has SQL Injection, leading to PHP Object Injection via wp-admin/admin-ajax.php.

In phpCollab version 2.5.1 and earlier, there is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the id parameter in newsdesk/newsdesk.php.

D-Link DGS-1500 Ax devices before version 2.51B021 have a hardcoded password, allowing remote attackers to gain shell access.

CVE-2017-15222 describes a buffer overflow vulnerability in Ayukov NFTPD 2.0 and earlier, allowing remote attackers to execute arbitrary code.

Directory traversal vulnerability in minion id validation in SaltStack Salt before version 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.

Cloud Foundry Runtime before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to leverage unspecified impact by failing to expire password reset links.

The password change functionality in Cloud Foundry Runtime before version 216, UAA before version 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before version 1.7.0 allows attackers to leverage the failure to expire existing sessions.

The get_login_ip_config_file function in Eyou Mail System before version 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter.

In PHPSUGAR PHP Melody CMS version 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.

The printDirect function in the node-printer module version 0.0.1 and earlier allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.

SQL injection vulnerability in LetoDMS before version 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

osTicket version 1.10.1 allows uploading 'html' files but does not properly validate the contents of the uploaded files, enabling the upload of arbitrary file types, including malicious ones. An attacker can exploit this vulnerability to upload malicious files to the web application.

SQL Injection exists in E-Sic 1.0 via the f parameter to the zip code search script (buscacep.php).

An authentication bypass exists in E-Sic 1.0 via '=' or 'or' values for the username and password in the /index (login) URI.

The Reporting Compatibility Add On before 2.0.4 for OpenMRS does not authenticate users when deserializing XML input into ReportSchema objects. This allows remote unauthenticated users to execute operating system commands by crafting malicious XML payloads.

An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party product 'SQLite'. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party 'SQLite' product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.