CVE Vulnerability Catalog

The Loginizer plugin before version 1.3.6 for WordPress has an SQL Injection vulnerability that can be exploited via the X-Forwarded-For HTTP header.

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9 and 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.

SQL injection vulnerability exists in Quest KACE Asset Management Appliance versions 6.4.120822 through 7.2 and Systems Management Appliance versions 6.4.120822 through 7.2.101.

The api/storage web interface in Unitrends Backup (UB) before version 10.0.0 has an issue with the validation of one of its input parameters. A remote attacker could exploit this flaw to bypass authentication and execute arbitrary commands with root privileges on the target system.

A vulnerability was discovered in the bpserverd protocol in Unitrends Backup (UB) before version 10.0.0, allowing authentication to be bypassed. A remote attacker could exploit this issue to execute arbitrary commands with root privileges on the target system.

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5, G5 S Series, M5, 360, 360 Plus, AutoXpress, AutoExpress Plus, LaserJet, ProTouch Tandem, ProTouch ICON, and ProTouch AutoGloss. The username and password are transmitted insecurely.

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5, G5 S Series, M5, 360, 360 Plus, AutoXpress, AutoExpress Plus, and ProTouch systems. The web server does not properly verify that provided authentication information is correct.

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202, R203, R203-V1, R203-V2, R204, and R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.

A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The issue is due to improper handling of authentication requests and policy assignment for externally authenticated users.

The zmq3 input and output modules in rsyslog before version 8.28.0 interpreted description fields as format strings, potentially allowing a format string attack with unspecified impact.

An issue was discovered in SMA Solar Technology products related to the SIP implementation, which does not properly use authentication with encryption. This makes it vulnerable to replay attacks, packet injection attacks, and man in the middle attacks.

An issue was discovered in SMA Solar Technology products that allows an attacker to update device firmware without authentication using the SMAdata2+ protocol or Sunny Explorer. If an attacker creates a custom firmware version accepted by the inverter, it can be completely compromised.

An issue was discovered in SMA Solar Technology products related to the use of a weak hashing algorithm for encrypting passwords in REGISTER requests. This algorithm can be cracked relatively easily, allowing an attacker to gain access to passwords.

An issue was discovered in SMA Solar Technology products related to the Grid Guard system, which uses predictable codes. Such a code, when combined with the installer account, allows changing very sensitive parameters.

An issue was discovered in SMA Solar Technology products that allows plaintext passwords to be sniffed as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the device.

An issue was discovered in SMA Solar Technology products related to a very weak password policy for user and installer passwords. There are no complexity or length requirements, making it difficult to create strong passwords.

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords are rarely changed, leading to user passwords almost always being default, and installer passwords often being similar across installations.

Heap-based buffer overflow in the psf_binheader_writef function in common.c in libsndfile through version 1.0.28 allows remote attackers to cause application crashes or possibly have unspecified other impacts.

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.

MaLion for Windows and Mac versions 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server.