CVE Vulnerability Catalog

CVE-2017-0561 describes a remote code execution vulnerability in the Broadcom Wi-Fi firmware that allows a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the potential for remote code execution.

Dataprobe iBootBar (with firmware from 2007-09-20 and possibly later beta versions) allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCCOOKIE cookie.

Dataprobe iBootBar (with firmware from 2007-09-20 and possibly later) allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCRABBIT cookie.

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.

XiongMai uc-httpd has a directory traversal vulnerability allowing the reading of arbitrary files via a 'GET ../' HTTP request.

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials that allow access to the devices. The username 'energetic' and password 'wireless' can be used in the web interface or by connecting via TELNET.

Urządzenia Schneider Electric Modicon TM221CE16R w wersji 1.3.3.3 umożliwiają zdalnym atakującym odkrycie hasła ochrony aplikacji poprzez wysłanie określonego żądania do portu Modbus (502/tcp). Po uzyskaniu hasła, aplikacja może być dowolnie pobierana, modyfikowana i przesyłana z powrotem.

Urządzenia Schneider Electric SoMachine Basic 1.4 SP1 oraz Schneider Electric Modicon TM221CE16R 1.3.3.3 mają podatność związaną z twardo zakodowanym kluczem. Funkcja Ochrony Projektu, która ma na celu zapobieganie nieautoryzowanemu dostępowi do chronionych plików XML, wykorzystuje klucz, który nie może być zmieniony, co umożliwia odczytanie hasła użytkownika z odszyfrowanych danych.

W Apache Tomcat przed wersją 6.0.48, 7.x przed 7.0.73, 8.x przed 8.0.39, 8.5.x przed 8.5.7 oraz 9.x przed 9.0.0.M12 możliwe jest zdalne wykonanie kodu, jeśli używany jest JmxRemoteLifecycleListener i atakujący ma dostęp do portów JMX. Problem wynika z tego, że ten listener nie został zaktualizowany w zgodności z poprawką CVE-2016-3427 firmy Oracle, która dotyczyła typów poświadczeń.

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

Rogue Wave JViews before version 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath. The issue exists because the ilog.views.faces.IlvFacesController servlet does not require explicit configuration of servlets that can be called.

A vulnerability in Cisco Aironet 1830 and 1850 Series Access Points running Cisco Mobility Express Software allows an unauthenticated remote attacker to take complete control of an affected device. The issue is due to the existence of default credentials available regardless of the device's configuration.

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data/configurations directory. It leverages the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69.

F5 SSL Intercept iApp versions 1.5.0 - 1.5.7 is vulnerable to an unauthenticated remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic.

AIRTAME HDMI dongle with firmware before version 2.2.0 allows unauthenticated access to a large part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot the device, or force a software update at any time.

In the Linux kernel before version 4.5, there is a vulnerability that allows remote attackers to execute arbitrary code via UDP traffic. This issue occurs during an unsafe second checksum calculation during the execution of a recv system call with the MSG_PEEK flag.

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) display_name parameter.

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg.

During the installation of Ambari versions 2.4.0 to 2.4.2, Ambari Server artifacts are not created with proper access control lists (ACLs).

Cougar-LG stores sensitive information under the web root with insufficient access control, allowing remote attackers to obtain credentials.