CVE Vulnerability Catalog

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android related to key storage. The keystore is locked with a hard-coded password, allowing anyone with access to read its contents, including the user's private key.

The spikekill.php file in Cacti before version 1.1.16 may allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

CVE-2017-11757 involves a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13, allowing remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The issue occurs after the server-client encryption key exchange.

MEDHOST Connex contains a hard-coded Mirth Connect admin credential used for customer management access. An attacker with knowledge of the hard-coded credential and the ability to communicate with the Mirth Connect management console may intercept sensitive patient information.

The firmware of Cisco DPC3939, DPC3939B, DPC3941T, and Arris TG1682G devices contains a vulnerability that allows remote attackers to execute arbitrary code via a specific, but undisclosed, exposed service. The issue pertains only to a single service that is unnecessarily exposed.

The Comcast firmware on Cisco DPC3939 devices allows Network Processor Linux users to obtain root access to the Application Processor Linux system via shell metacharacters in commands.

The Comcast firmware on Cisco DPC3939 devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon and then establishing a TELNET session.

The Comcast firmware on Cisco DPC3939 devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server.

VMware vCenter Server versions 5.5, 6.0, and 6.5 allow vSphere users with limited privileges to use the VIX API to access Guest Operating Systems without the need for authentication.

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.

The MEDHOST Document Management System contains hard-coded credentials for accessing Apache Solr. An attacker with knowledge of these credentials and the ability to communicate with Apache Solr may gain access to sensitive patient and financial information.

The MEDHOST Document Management System contains hard-coded credentials used for customer database access. An attacker with knowledge of these credentials and the ability to communicate with the database may obtain or modify sensitive patient and financial information.

In MetInfo versions up to 5.3.17, the job/uploadfile_save.php file blocks the .php extension but not related extensions, which may allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions.

NetComm Wireless 4GT101W routers with Hardware: 0.01 and Software: V1.1.8.8 and Bootloader: 1.1.3 do not require authentication to access logfile.html, status.html, and system_config.html.

SQL injection exists in GLPI before version 9.1.5 in front/devicesoundcard.php via the start parameter.

Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a 'User Mode Write AV starting at reporter!madTraceProcess.'

A flaw in Intel processors from the 6th and 7th Generation and in the Intel Xeon E3-1500M v5 and v6 and E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.

GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.

GraphicsMagick version 1.3.26 has a memory leak in the PersistCache function in magick/pixel_cache.c during the writing of Magick Persistent Cache (MPC) files.

GraphicsMagick version 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images.