CVE Vulnerability Catalog

TeamPass versions before 2.1.27.4 are vulnerable to a SQL injection in users.queries.php.

Dolibarr ERP/CRM versions before 5.0.3 are vulnerable to SQL injection in user/index.php, in the search_supervisor and search_statut parameters.

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass, which can be easily read by an attacker.

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. An attacker can exploit the bauth cookie to access cgi-bin/MANGA/admin.cgi, allowing for enumeration of user accounts.

A stack-based buffer overflow in dnstracer through version 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument mishandled in a strcpy call for argv[0].

Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.

The Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx.

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c.

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the 'Broadpwn' issue.

BigTree CMS version 4.2.18 has an unrestricted file upload vulnerability. An attacker can upload an 'xxx.pht' or 'xxx.phtml' file, allowing them to bypass safety checks and execute arbitrary code.

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges.

Ceragon FibeAir IP-10 has a default SSH public key in the authorized_keys file for the mateidu user, allowing remote attackers to gain SSH access by leveraging knowledge of the private key.

Samba w wersjach od 3.5.0 do 4.6.4, 4.5.10 i 4.4.14 jest podatna na zdalne wykonanie kodu. Złośliwy klient może przesłać bibliotekę współdzieloną do zapisywalnego udziału, a następnie spowodować, że serwer ją załaduje i wykona.

RMI vulnerability in Hitachi Device Manager before version 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.

The TLS session cache in FreeRADIUS from versions 2.1.1 to 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 has a problem with reliably preventing the resumption of an unauthenticated session. This allows remote attackers, such as malicious 802.1X supplicants, to bypass authentication via PEAP or TTLS.

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and OnCell 5104-HSPA and 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and OnCell 5104-HSDPA, 5104-HSPA, and 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in the function `ofputil_pull_ofp15_group_mod` in `lib/ofp-util.c`.