CVE Vulnerability Catalog

The name_parse function in evdns.c in libevent before version 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, leading to an out-of-bounds stack read.

An integer underflow in the _gdContributionsAlloc function in the GD Graphics Library (libgd) before version 2.2.4 allows remote attackers to have unspecified impact via manipulation of the u variable.

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query. This can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.

CVE-2014-9921 describes a configuration error in McAfee Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier that allows remote unauthenticated users to view, add, and remove users.

Bitlbee-libpurple before version 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.

A use-after-free vulnerability in bitlbee-libpurple before version 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire.

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU.

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. An attacker can send cross-domain requests directly to the REST API for users with a valid session cookie and receive the result.

QOS.ch Logback versions before 1.2.0 have a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP request that discloses the configuration file with the login password.

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1 that allows attackers to login using the hashed password instead of the valid password string.

OxygenOS before version 4.0.2 on OnePlus 3 and 3T has two hidden fastboot oem commands that allow an attacker to lock/unlock the bootloader without user confirmation. This allows for persistent code execution with high privileges and complete access to user data.

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T that allows an attacker to persistently make the (locked) bootloader start with dm-verity disabled. This results in the kernel not verifying the system partition, potentially allowing for persistent code execution and privilege escalation.

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify users correctly, allowing remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.

Parser Multipart Jakarta w Apache Struts 2 w wersjach 2.3.x przed 2.3.32 oraz 2.5.x przed 2.5.10.1 ma błędne zarządzanie wyjątkami i generowanie komunikatów o błędach podczas prób przesyłania plików. To umożliwia zdalnym atakującym wykonywanie dowolnych poleceń poprzez spreparowane nagłówki HTTP Content-Type, Content-Disposition lub Content-Length.

In version 2.2.16 of Azure Data Expert Ultimate, there is a buffer overflow vulnerability in the SMTP verification function, which can lead to remote code execution. An attacker can exploit this by using a crafted SMTP daemon that sends a long 220 string.

On Cambium Networks cnPilot R200/201 devices before version 4.3, there is a vulnerability involving the device's certificate and its RSA keys.

A buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer, leading to a heap-based buffer overflow and potential remote code execution.

A buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution.

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution.