CVE Vulnerability Catalog

The samsung_extdisp driver in the Samsung S4 (GT-I9500) kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

Progress Telerik UI dla ASP.NET AJAX przed R2 2017 SP2 nie ogranicza poprawnie wejścia użytkownika w RadAsyncUpload, co pozwala zdalnym atakującym na przesyłanie dowolnych plików lub wykonywanie dowolnego kodu.

Telerik.Web.UI w Progress Telerik UI dla ASP.NET AJAX przed R1 2017 oraz R2 przed R2 2017 SP2 wykorzystuje słabą metodę szyfrowania RadAsyncUpload, co umożliwia zdalnym atakującym przesyłanie dowolnych plików lub wykonywanie dowolnego kodu.

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

The mkostemp function in login-utils in util-linux, when used incorrectly, allows remote attackers to cause file name collision and possibly other attacks.

The FormCraft Basic plugin version 1.0.5 for WordPress has an SQL injection vulnerability in the id parameter in form.php.

A double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

CVE-2017-12791 describes a vulnerability in minion ID validation in SaltStack Salt before version 2016.11.7 and 2017.7.x before 2017.7.1. This allows remote minions with incorrect credentials to authenticate to a master using a crafted minion ID.

In ImageMagick before version 6.9.9-0 and 7.x before version 7.0.6-1, there is a vulnerability in the ReadOneMNGImage function in coders/png.c that leads to an out-of-bounds read with the MNG CLIP chunk.

Apache Pony Mail versions 0.6c through 0.8b allow remote attackers to bypass authentication.

WAGO IO 750-849 version 01.01.27 and WAGO IO 750-881 version 01.02.05 do not contain privilege separation.

WAGO IO 750-849 versions 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

The novi_process_manager_daemon service in the NoviWare software may be inadvertently exposed when an operator attempts to modify access control lists (ACLs). A bug in applying these modifications could allow remote, unauthenticated attackers to gain privileged (root) code execution on the switch.

Network interfaces of the cliengine and noviengine services in the NoviWare software may be inadvertently exposed during ACL modifications due to a bug in applying those modifications. This can lead to a stack-based buffer overflow, allowing remote, unauthenticated attackers to gain privileged (root) code execution on the switch.

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6, is prone to a buffer overflow in the 'show log cli' command. A read-only user can exploit this vulnerability to gain privileged (root) code execution on the switch via command injection.

Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.

An Authentication Bypass vulnerability in ESMAC (Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product.

NexusPHP version 1.5.beta5.20120707 has an SQL Injection vulnerability in forummanage.php via the sort parameter in an addforum action.