CVE Vulnerability Catalog

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests.

UDFclient (before version 0.8.8) has a custom strlcpy implementation that is vulnerable to buffer overflow. This issue occurs on systems with a C library that lacks its own strlcpy.

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled.

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole 'Simple PHP File Manager' component).

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization. The Technicolor DPC3928SL with specific firmware can be reached from the Internet using any SNMP community string.

Adobe ColdFusion w wersjach 2016 Update 3 i wcześniejszych, ColdFusion 11 Update 11 i wcześniejszych oraz ColdFusion 10 Update 22 i wcześniejszych ma podatność na deserializację Java w bibliotece Apache BlazeDS. Skuteczne wykorzystanie tej podatności może prowadzić do wykonania dowolnego kodu.

A stack-based buffer overflow in the ipv6_addr_from_str function in RIOT prior to April 25, 2017, can be exploited by local and potentially remote attackers. Attackers may cause a denial of service or possibly have unspecified other impacts via a malformed IPv6 address.

FreeType 2 before March 26, 2017, has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.

The dpkg-source program in versions 1.3.0 through 1.18.23 allows the use of a non-GNU patch program and does not provide a protection mechanism for blank-indented diff hunks, enabling remote attackers to conduct directory traversal attacks via a crafted Debian source package.

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.

WIFICAM (P2P) Wireless IP Camera devices have a backdoor root account that can be accessed via TELNET.

TP-Link C2 and C20i devices with firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a 'host=' line within HTTP POST data.

TP-Link C2 and C20i devices with firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have backdoor accounts. These accounts include admin with password 1234, guest with password guest, and test with password test.

The eCommerce Shopsoftware version 2.0.2.2 rev 10690 contains an XXE vulnerability in the api/it-recht-kanzlei/api-it-recht-kanzlei.php file.

A vulnerability in the Solaris component of Oracle Sun Systems Products Suite allows an unauthenticated attacker with network access to compromise Solaris. While the vulnerability primarily affects Solaris, attacks may significantly impact additional products.

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (Rules Engine) allows a low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Attacks may significantly impact additional products.

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise Oracle Scripting. Attackers can create, delete, or modify critical data and gain unauthorized access to all data accessible in Oracle Scripting.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite, concerning the Kernel Zones virtualized NIC driver. It allows a low privileged attacker with network access to compromise Solaris.

Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite allows a high privileged attacker with network access via HTTP to compromise Primavera Gateway. The attack may significantly impact additional products in the ecosystem.

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite allows a low privileged attacker with network access via HTTP to compromise the system. Affected versions are 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.