CVE Vulnerability Catalog

A remote command injection vulnerability as root exists in Western Digital MyCloud NAS version 2.11.142. An attacker can exploit a modified arg parameter in the POST data at the /web/google_analytics.php URL.

A remote command injection vulnerability as root exists in Western Digital MyCloud NAS version 2.11.142 via a modified Cookie header on the index.php page.

The admin/plugin.php file in Piwigo up to version 2.8.3 does not validate the sections variable when using it to include files. This can lead to information disclosure and code execution if it contains a .. sequence.

A stack-based buffer overflow in Quick Heal Internet Security, Total Security, and AntiVirus Pro allows remote attackers to execute arbitrary code. This affects version 10.1.0.316 and earlier on OS X.

A heap-based buffer overflow in LibVNCClient in LibVNCServer before version 0.9.11 can be exploited by remote servers. An attacker can cause application crashes or potentially execute arbitrary code by sending a crafted FramebufferUpdate message with the Ultra type.

A heap-based buffer overflow in LibVNCClient in LibVNCServer before version 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message.

In Swift Mailer before version 5.4.5, a vulnerability allows remote attackers to pass extra parameters to the mail command. This can lead to arbitrary code execution via a crafted email address in the From, ReturnPath, or Sender headers.

The isMail transport in PHPMailer before version 5.2.20 may allow remote attackers to pass extra parameters to the mail command, potentially leading to arbitrary code execution. This issue arises from improper interaction between the escapeshellarg function and internal escaping in the mail function in PHP.

The setFrom function in the Sendmail adapter in the zend-mail component before versions 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11, may allow remote attackers to pass extra parameters to the mail command, potentially executing arbitrary code via a " (backslash double quote) in a crafted e-mail address.

Funkcja mailSend w transporcie isMail w PHPMailer przed wersją 5.2.18 może umożliwić zdalnym atakującym przekazywanie dodatkowych parametrów do polecenia mail, co może prowadzić do wykonania dowolnego kodu poprzez wprowadzenie " (backslash podwójny cudzysłów) w odpowiednio skonstruowanej właściwości Sender.

The file include/functions_installer.inc.php in Serendipity up to version 2.0.5 is vulnerable to File Inclusion and possible Code Execution attacks during first-time installation because it fails to sanitize the dbType POST parameter before adding it to an include() call.

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6, as well as RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7, regarding MQTT connection authentication. Authentication using a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request.

The Single Sign-On feature in VMware vCenter Server 5.5 before U3e, 6.0 before U2a, and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

VMware vRealize Operations versions 6.x before 6.4.0 allow remote authenticated users to gain privileges or halt and remove virtual machines via unspecified vectors.

VMware vSphere Data Protection (VDP) versions 5.5.x through 6.1.x contains an SSH private key with a publicly known password, making it easier for remote attackers to gain login access via an SSH session.

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system.

Bundler 1.x may allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source.

In the perl-XML-Twig module, the `expand_external_ents` option, which is supposed to control external entity expansion, does not work correctly. External entities are always expanded, regardless of the option's setting.

Microsoft Office 2016 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document.

In dotCMS before version 3.3.2, there is an SQL injection vulnerability in the REST API that allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.