CVE Vulnerability Catalog

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication.

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.

HPE LoadRunner before version 12.53 Patch 4 and HPE Performance Center before version 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. In LoadRunner, this involves a heap-based buffer overflow in libxdrutil.dll.

An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. Exploiting this vulnerability allows an attacker with the same IP address to bypass authentication by accessing a specific URL.

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists.

Flexense VX Search Enterprise version 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.

Zyxel NBG6716 devices version V1.00(AAKG.9)C0 allow command injection in the ozkerz component due to the direct use of beginIndex and endIndex parameters in a popen call.

An input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80 allows for the execution of code remotely.

UI-Dialog version 1.09 and earlier allows remote attackers to execute arbitrary commands.

An XXE vulnerability in the import package functionality of the deployment module in Lansweeper before version 6.0.100.67 allows remote authenticated users to obtain sensitive information and conduct SSRF attacks.

The Epson 'EasyMP' software allows remote streaming from a user's computer to projectors. All Epson projectors supporting this software are vulnerable to a brute-force attack, enabling an attacker to remotely control and stream to the vulnerable device.

The Epson 'EasyMP' software allows remote streaming from a user's computer to projectors. Each device is authenticated using a unique 4-digit code, but projectors also have a hardcoded 'backdoor' code (2270) that grants access to all devices.

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

Buffer overflow in the mpfr_strtofr function in GNU MPFR before version 3.1.2-p11 may allow context-dependent attackers to achieve unspecified impact via vectors related to incorrect documentation for mpn_set_str.

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before version 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.

Multiple SQL injection vulnerabilities in phpBugTracker before version 1.7.0 allow remote attackers to execute arbitrary SQL commands through various parameters in PHP files.

A number of command injection vulnerabilities were discovered in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.