CVE Vulnerability Catalog

The SMB/CIFS parser in tcpdump before version 4.9.2 has a buffer over-read in smbutil.c:name_len().

A vulnerability in the TURN server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthorized access to components or sensitive information in an affected system. The issue is due to an incorrect default configuration of the TURN server, which could expose internal interfaces and ports.

The DHCP client on D-Link DIR-850L REV. A and REV. B devices allows unauthenticated remote code execution as root due to mishandling of shell metacharacters in /etc/services/INET/inet_ipv4.php.

D-Link DIR-850L REV. B devices (with firmware through FW208WWb02) have a hardcoded password for the Alphanetworks account, allowing remote attackers to gain root access via a TELNET session upon device reset.

The register_send.php file on D-Link DIR-850L REV. B devices (with firmware up to FW208WWb02) does not require authentication, which can lead to unintended enrollment in mydlink Cloud Services.

A double free vulnerability in MIT Kerberos 5 (krb5) allows attackers to have unspecified impact via automatic deletion of security contexts on error.

An unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before version 5.3.2 may lead to unknown impact and attack vectors.

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 may lead to unknown impact and attack vectors.

Axesstel MU553S MU55XS-V1.14 devices have a default password of 'admin' for the admin account, which poses a risk of unauthorized access.

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the term parameter in module/admin_group/search.php.

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT CREATION' section, related to lack of input validation in include/function.php.

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT UPDATE' section.

The DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 contains a vulnerability that allows an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption issue.

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.

EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.

The upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. This issue was identified until September 12, 2017.

The Gwolle Guestbook plugin before version 1.5.4 for WordPress has a PHP remote file inclusion vulnerability when allow_url_include is enabled. This allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php.

Ellucian Banner Student versions 8.5.1.2 through 8.7 allow remote attackers to reset arbitrary passwords via unspecified vectors, referred to as 'Weak Password Reset.'