CVE Vulnerability Catalog

The Inmarsat AmosConnect 8 login form is vulnerable to blind SQL injection, allowing remote attackers to access user credentials, including usernames and passwords.

WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified vectors.

WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via unspecified vectors.

Rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting in potential remote code execution.

The passwd_recovery.lua file on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This issue is fixed in version C9(UN)_V2_170511.

A stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore versions 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.

libinfinity versions before 0.6.6-1 do not validate expired SSL certificates, allowing remote attackers to have unspecified impact via unknown vectors.

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the 'PING' feature within the web interface allows performing command injection via the 'pip' parameter.

Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of 'admin' for the admin account.

Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with 'GET /../' on TCP port 4321.

PHICOMM K2 (PSG1218) devices running V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script. Alternatively, an attacker can leverage unauthenticated access to this script to trigger a reboot using an ifType=reboot action.

An issue was discovered in certain Apple products, including iOS, macOS, tvOS, and watchOS, related to the 'Contacts' component. A buffer overflow allows remote attackers to execute arbitrary code or cause an application crash.

Televes COAXDATA GATEWAY 1Gbps devices in version doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in the /mib.db file.

On Televes COAXDATA GATEWAY 1Gbps devices in version doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks proper access control, related to ReadFile.cgi and LoadCfgFile.

Televes COAXDATA GATEWAY 1Gbps devices in version doc-wifi-hgw_v1.02.0014 4.20 do not check authorization in password.shtml, leading to arbitrary password change.

In NancyFX before version 1.4.4 and 2.x before version 2.0-dangermouse, there is a remote code execution vulnerability via deserialization of JSON data in a CSRF cookie.

Urządzenia Citrix NetScaler SD-WAN w wersji do v9.1.2.26.561201 umożliwiają zdalnym atakującym wykonywanie dowolnych poleceń powłoki jako root za pomocą ciasteczka CGISESSID. Na urządzeniach CloudBridge (dawna nazwa NetScaler SD-WAN) nazwa ciasteczka to CAKEPHP.

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.

IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.