CVE Vulnerability Catalog

BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication, consequently reading arbitrary files or possibly having unspecified other impact by leveraging a 'logic flaw' in the authentication process.

A heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 can be exploited by remote attackers. This may lead to denial of service (crash) or disclosure of sensitive information from heap memory.

Heap-based buffer overflow in PCRE versions 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression.

Buffer overflow in enhance.c in ImageMagick before version 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.

Integer overflow in profile.c in ImageMagick before version 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via manipulation of the offset variable.

The DCM reader in ImageMagick before version 6.9.4-5 and 7.x before version 7.0.1-7 allows remote attackers to exploit the lack of validation of pixel values (red, green, blue), potentially leading to unspecified impact.

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.

The DCM reader in ImageMagick before version 6.9.4-5 and 7.x before version 7.0.1-7 allows remote attackers to leverage lack of NULL pointer checks, potentially leading to unspecified impact.

The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.

An issue was discovered in phpMyAdmin related to improper stripping of the CSRF token from the return URL of the preference import action when the arg_separator is different from its default '&' value. This affects versions 4.6.x (prior to 4.6.5), 4.4.x (prior to 4.4.15.9), and 4.0.x (prior to 4.0.10.18).

An issue was discovered in phpMyAdmin due to a bug in serialized string parsing, allowing bypass of the protection offered by the PMA_safeUnserialize() function.

An issue was discovered in phpMyAdmin that allows bypassing the AllowRoot restriction and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp.

An issue was discovered in phpMyAdmin related to the PHP unserialize() function, which does not verify the validity of data before deserialization. This can lead to code execution due to the interaction with object instantiation and autoloading.

Vulnerability in PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via SAPGUI or Internet Communication Framework (ICF) over HTTP or HTTPS.

JFrog Artifactory before version 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, known as LDAP entry poisoning.

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object.

Django versions 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user, making it easier for remote attackers to gain access to the database server.

The trove service user in Openstack deployment and Trove Barclamp in the Crowbar Framework has a default password, making it easier for remote attackers to gain access via unspecified vectors.