CVE Vulnerability Catalog

The XXE vulnerability in the GlobalProtect gateway interface in PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause denial of service, or conduct SSRF attacks.

Lexmark Scan To Network (SNF) version 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests. This allows remote attackers to obtain sensitive information via specific requests.

A session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) with firmware before FW1.17.B01 allows remote attackers to hijack web sessions via unspecified vectors.

Soreco Xpert.Line 3.0 allows local users to spoof users and consequently gain privileges by intercepting a Windows API call.

The XXE vulnerability in SAP Netweaver before version 7.01 allows an attacker to exploit external XML entities to gain access to system data.

Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.

The NodeManager in Apache Hadoop versions 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for the credential store provider used by the NodeManager for YARN applications.

HelpDEZk version 1.1.1 has an SQL Injection vulnerability in the loginController.php file, occurring in the selectWarning function. This issue is related to the admin/login/getWarningInfo/id/ PATH_INFO.

ImageMagick version 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

The webadmin plugin for opendreambox 2.0.0 contains a vulnerability that allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

The Ping Module in the web interface of Technicolor TD5336 OI_Fw_v7 devices has a command injection vulnerability that allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.

Unrar version 0.0.1 (also known as unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1, unauthorized command execution is possible. The app_minivm module has an 'externnotify' program configuration option that is executed by the MinivmNotify dialplan application, allowing arbitrary shell command injection.

SimpleSAMLphp versions 1.7.0 through 1.14.10 may allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.

CVE-2017-3897 describes a vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus versions prior to 3.11.599.3. This allows network attackers to execute malicious files via an HTTP backend response.

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp version 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication due to missing character conversions before an XOR operation.

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.

A double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before version 1.7.87 allows attackers to have unspecified impact via unknown vectors.

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification could execute terminal escape sequences.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.