CVE Vulnerability Catalog

The getid3 library in MediaWiki before versions 1.24.1, 1.23.8, 1.22.15, and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

A use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.

The vulnerability in Berta CMS allows unrestricted file uploads, enabling remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension.

Xpress Server in SAP POS does not require authentication for read/write/delete file access. This poses a serious security risk to data.

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials.

CVE-2017-14952 is a double free vulnerability in i18n/zonemeta.cpp in International Components for Unicode (ICU) version 59.1. It allows remote attackers to execute arbitrary code via a crafted string.

Fiyo CMS version 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the super administrator functions 'Install and Update' or 'Backup' via the view parameter in a direct request to fiyo/dapur.

SQL injection vulnerability in the Store Locator plugin versions 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files, potentially leading to denial of service due to resource consumption.

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, allowing remote attackers to execute arbitrary commands via TCP port 23.

E-Sic version 1.0 allows SQL injection via the q parameter in the esiclivre/restrito/inc/lkpcep.php file, which is part of the private search area.

In the web panel of the Airtame HDMI dongle with firmware before version 3.0, an attacker can set their own session ID via a 'Cookie: PHPSESSID=' header. This can lead to persistent access to the admin panel even after an admin password change.

Apache Solr before 7.1 is vulnerable to remote code execution, which can be exploited via an XXE attack in conjunction with the Config API add-listener command, leading to the RunExecutableListener class.

CVE-2017-10622 is an authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform that allows a remote unauthenticated attacker to log in as any privileged user. This issue affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3.

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM.

CVE-2016-1265 allows a remote unauthenticated attacker with access to Junos Space to execute arbitrary code or gain access to devices managed by Junos Space. It exploits attack vectors such as CSRF, default authentication credentials, information leak, and command injection.

The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication.