CVE Vulnerability Catalog

CVE-2017-5574 is an SQL injection vulnerability in register.php in GeniXCMS before version 1.0.0 that allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.

The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ../ to bypass the filter rule, allowing them to delete or read any files on the server.

Akamai NetSession version 1.9.3.1 is vulnerable to DLL Hijacking as it attempts to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, allowing for DLL hijacking and code injection into the Akamai NetSession process space.

The main function in plistutil.c in libimobiledevice libplist through version 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.

In Subrion CMS version 4.0.5, a vulnerability allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.

Versions of sociomantic-tsunami before 0.10.3 allow remote attackers to execute arbitrary code via a crafted repository name.

A CGI handling flaw in bozohttpd in NetBSD allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.

Use-after-free vulnerability in Citrix Provisioning Services before version 7.12 allows attackers to execute arbitrary code via unspecified vectors.

Buffer overflow in Citrix Provisioning Services before version 7.12 allows attackers to execute arbitrary code via unspecified vectors.

Zimbra Collaboration before version 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors.

Libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

A heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.

GeniXCMS version 0.0.8 has an SQL injection vulnerability in Posts.class.php that allows remote attackers to execute arbitrary SQL commands via the id parameter.

GeniXCMS version 0.0.8 has an SQL injection vulnerability in author.control.php that allows remote attackers to execute arbitrary SQL commands via the type parameter.

A Directory Traversal vulnerability in DashboardFileReceiveServlet in Brocade Network Advisor versions prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.

A Directory Traversal vulnerability in FileReceiveServlet in Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.

CVE-2016-2090 describes an off-by-one vulnerability in the fgetwln function in libbsd before version 0.8.2, allowing attackers to trigger a heap-based buffer overflow via unspecified vectors.

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.

An integer overflow vulnerability was observed in the regemit function in regexp.c in MuJS by Artifex Software, Inc. It requires a regular expression with nested repetition, which can lead to code execution or a denial of service (buffer overflow) condition.