CVE Vulnerability Catalog

An SQL injection vulnerability in PhpCollab versions 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php.

OpenText Document Sciences xPression version 4.5SP1 Patch 13 (older versions might also be affected) has an XML External Entity vulnerability. An unauthenticated user can read directory listings or system files, or cause SSRF or Denial of Service.

A stack-based buffer overflow in dnsmasq before version 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

Heap-based buffer overflow in dnsmasq before version 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

A Missing Authentication for Critical Function issue was discovered in InduSoft Web Studio v8.0 SP2 and prior, and InTouch Machine Edition v8.0 SP2 and prior. A remote malicious entity could bypass server authentication and trigger the execution of an arbitrary command.

A stack-based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv.

A stack-based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code.

CVE-2017-12620 is a vulnerability related to XXE attacks that can occur when loading models or dictionaries containing XML in the Apache OpenNLP library. This issue affects applications that load models or dictionaries from untrusted sources.

Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters.

Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center) in all versions from HASP SRM 2.10 to Sentinel LDK 7.50 allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files.

The login page of the server on Huawei FusionServer rack servers RH2288 V3, RH2288H V3, XH628 V3, RH1288 V3, RH2288A V2, RH1288A V2, RH8100 V3, CH222 V3, CH220 V3, and CH121 V3 with software before specified versions allows remote attackers to bypass access restrictions and enter commands via unspecified parameters.

Intelbras WRN 150 devices allow remote attackers to read the configuration file, enabling authentication bypass via a direct request to cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.

FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module.

ERS Data System version 1.8.1.0 allows remote attackers to execute arbitrary code, related to 'com.branaghgroup.ecers.update.UpdateRequest' object deserialization.

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution.

A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution.

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30, and 9.40 allows remote users to bypass authentication.

MultiTech FaxFinder before version 4.1.2 stores passwords in an unencrypted form for the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0. This flaw allows files to be executed as well as created, potentially compromising other users or teams' projects stored in source control management of the RHMAP Core installation.