CVE Vulnerability Catalog

GraphicsMagick version 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames with non-identical widths.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in status.php that uses the id parameter.

SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command.

The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, allowing attackers to have unspecified impact via unknown vectors.

CVE-2015-2798 is a SQL injection vulnerability in Joomla! Component Contact Form Maker version 1.0.1 that allows remote attackers to execute arbitrary SQL commands via the id parameter.

MEDHOST Connex contains hard-coded credentials for customer database access. An attacker with knowledge of these credentials and the ability to communicate with the database may obtain or modify sensitive patient and financial information.

The MWOAuthDataStore::lookup_token function in the OAuth extension for MediaWiki versions 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature. This allows remote registered Consumers to use another Consumer's credentials by leveraging knowledge of those credentials.

The cgi_test.cgi in AirLive devices BU-2015, BU-3026, and MD-3025 has a vulnerability that allows remote attackers to execute arbitrary OS commands via shell metacharacters after an '&' in specific parameters.

An issue was discovered in Tilde CMS version 1.0.1 due to missing escaping of the backtick character, leading to SQL Injection vulnerability in the SELECT query in class.SystemAction.php.

On Cisco DDR2200 and DDR2201v1 devices, there is no access control for several configuration files, which may lead to unauthorized access to sensitive information.

Cisco DDR2200 and DDR2201v1 devices are vulnerable to remote command execution via shell metacharacters in the pingAddr parameter to the waitPingqry.cgi URI. The command output is visible in /PingMsg.cmd.

FineCms version 5.0.9 has a vulnerability allowing remote PHP code execution via the 'param' parameter in an action=cache request to libraries/Template.php, known as Eval Injection.

FineCms version 5.0.9 has a SQL Injection vulnerability via the field parameter in requests with actions module, member, form, or related to the libraries/Template.php file.

FineCms version 5.0.9 has a SQL Injection vulnerability via the catid parameter in an action=related request to libraries/Template.php.

FineCms version 5.0.9 has an SQL Injection vulnerability via the num parameter in action=related or action=tags requests to libraries/Template.php.

tcpdump version 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.

tcpdump version 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.

A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges. Attackers can execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.