CVE Vulnerability Catalog

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.

Barco ClickShare CSC-1 devices with firmware before version 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.

Exponent CMS version 2.3.9 has a remote code execution vulnerability in /install/index.php. An attacker can upload a malicious 'exploit.tar.gz' file to the website and then extract it, leading to arbitrary code execution.

Exponent CMS version 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload a 'php' file to the website through uploader_paste.php, then overwrite /framework/conf/config.php, leading to arbitrary code execution.

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow.

Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite.

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking.

Integer overflow leads to a TOCTOU condition in hypervisor PIL. This overflow can be exploited to bypass (Peripheral Image Loader) PIL authentication.

Improper input validation in Access Control APIs may lead to incorrect memory range checking. The issue affects the kernel version 3.18.

Unauthenticated messages are processed by the User Equipment (UE). Certain NAS messages are processed when no EPS security context exists in the UE.

In CodeIgniter before version 3.1.3, a vulnerability exists in Email.php that allows remote attackers to execute arbitrary code. Attackers can leverage control over the email->from field to inject sendmail command-line arguments.

All versions of PHP 7 have a vulnerability that during the unserialization process may lead to use-after-free when resizing the 'properties' hash table of a serialized object. A remote attacker may exploit this bug to gain arbitrary code execution.

The base64decode function in base64.c in libimobiledevice libplist through version 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

The SplObjectStorage unserialize implementation in PHP before 7.0.12 does not verify that a key is an object, allowing remote attackers to execute arbitrary code or cause a denial of service via crafted serialized data.

In PHP before 7.0.15 and 7.1.x before 7.1.1, there is an issue in zend_hash.c that mishandles cases requiring large array allocations. This can allow remote attackers to execute arbitrary code or cause a denial of service.

The 'process-execute' and 'process-spawn' procedures in CHICKEN Scheme use fixed-size buffers for holding arguments and environment variables for the execve() call. This can lead to buffer overrun when user-supplied argument/environment variable lists are provided.

eClinicalWorks Population Health (CCMR) has a session fixation vulnerability. The application does not assign a new session ID during user authentication, allowing the use of an existing session ID.

Splunk Web in Splunk Enterprise before version 5.0.17, 6.0.13, 6.1.12, 6.2.12, 6.3.8, and 6.4.4 is vulnerable to HTTP request injection attacks, allowing remote attackers to obtain sensitive REST API authentication-token information.