CVE Vulnerability Catalog

Tenable Appliance versions 3.5 - 4.4.0, and possibly prior versions, contain a flaw in the simpleupload.py script in the Web UI. A remote attacker can inject arbitrary commands through manipulation of the tns_appliance_session_user parameter.

Buffer overflow in D-Link devices DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2660, DAP-2690, DAP-2695, DAP-3320, and DAP-3662 allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.

Netgear WNAP320, WNDAP350, and WNDAP360 before version 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.

W urządzeniach Netgear WN604 przed wersją 3.3.3 oraz WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360 i WNDAP660 przed wersją 3.5.5.0 występuje podatność, która umożliwia zdalnym atakującym wykonywanie dowolnych poleceń poprzez pliki boardData102.php, boardData103.php, boardDataJP.php, boardDataNA.php i boardDataWW.php.

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters.

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device.

Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long username or password, triggering a heap-based buffer overflow.

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.

In Apache Log4j 2.x before version 2.8.2, when using the TCP socket server or UDP socket server to receive log events, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

In Apache Tomcat versions 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, a regression in send file processing was introduced. If the send file processing completed quickly, it was possible for the same Processor to be added to the processor cache twice.

In Apache Tomcat versions from 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75, there was an issue with the use of the incorrect facade object in some calls to application listeners. This allowed untrusted applications to retain a reference to the request or response object, potentially accessing or modifying information associated with another web application.

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.

LibreOffice before March 14, 2017, has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

In wallpaper.c in feh before v2.18.3, a malicious client pretending to be the E17 window manager can trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file.

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.

FFmpeg before January 23, 2017, has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.