CVE Vulnerability Catalog

In Razer Synapse 2.20.15.1104, there is a vulnerability that allows a specially crafted IOCTL to be sent to the rzpnk.sys driver. This can lead to opening a handle to an arbitrary process.

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name.

Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.

Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.

IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

SQL injection vulnerability in SOL.Connect ISET-mpp meter version 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.

The Etoile Ultimate Product Catalog plugin version 4.2.11 for WordPress has an SQL injection vulnerability in several POST actions in the wp-admin/admin-ajax.php file.

VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.

A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.

Backup archives in Trend Micro Deep Discovery Director 1.1 are encrypted with a static password, suggesting that the same password may be used across all virtual appliance instances.

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android related to key storage. The keystore is locked with a hard-coded password, allowing anyone with access to read its contents, including the user's private key.

The spikekill.php file in Cacti before version 1.1.16 may allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

CVE-2017-11757 involves a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13, allowing remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The issue occurs after the server-client encryption key exchange.

MEDHOST Connex contains a hard-coded Mirth Connect admin credential used for customer management access. An attacker with knowledge of the hard-coded credential and the ability to communicate with the Mirth Connect management console may intercept sensitive patient information.

The firmware of Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices contains a vulnerability that allows remote attackers to execute arbitrary code via a specific, but undisclosed, exposed service. The issue pertains only to a single service that is unnecessarily exposed.

The Comcast firmware on Cisco DPC3939 devices allows Network Processor Linux users to obtain root access to the Application Processor Linux system via shell metacharacters in commands.

The Comcast firmware on Cisco DPC3939 devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon and then establishing a TELNET session.

The Comcast firmware on Cisco DPC3939 devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server.

VMware vCenter Server versions 5.5, 6.0, and 6.5 allow vSphere users with limited privileges to use the VIX API to access Guest Operating Systems without the need for authentication.

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.