CVE Vulnerability Catalog

CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.

Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.

CVE-2016-10204 is an SQL injection vulnerability in Zoneminder 1.30 and earlier that allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.

The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.

PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, related to unauthenticated CORBA interfaces that allow inappropriate access.

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0 related to the use of hardcoded username and password in the NetBackup Cloud Storage Service.

Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user.

Multiple integer overflows in the vnc_connection_server_message and vnc_color_map_set functions in gtk-vnc before version 0.7.0 may allow remote servers to cause a denial of service (crash) or potentially execute arbitrary code via vectors involving SetColorMapEntries, leading to a buffer overflow.

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before version 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

In libdwarf before version 20161124, there is a vulnerability that allows remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, known as a 'negation overflow'.

An integer overflow at an unserialize_uep memory allocation site occurs for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

An issue exists on Dahua DHI-HCVR7216A-S3 devices with specific firmware versions where SmartPSS automatically logs in as admin on the login screen. This allows sniffing sensitive information without prior knowledge of the password.

The Zip::File component in the rubyzip gem before version 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 are vulnerable to Unauthenticated Command Bypass attacks. Attackers can exploit unspecified vectors to conduct these attacks.

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request.

Podatność CVE-2017-6077 dotyczy urządzeń NETGEAR DGN2200 z firmware do wersji 10.0.0.50, gdzie zdalni uwierzytelnieni użytkownicy mogą wykonywać dowolne polecenia systemowe poprzez wykorzystanie metaznaków powłoki w polu ping_IPAddr w żądaniu HTTP POST.

A stack-based buffer overflow vulnerability was discovered in the zebra daemon in Quagga before version 1.0.20161017 when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ, which is system-dependent, leading to message size incompatibility.