CVE Vulnerability Catalog

The vulnerability in Berta CMS allows unrestricted file uploads, enabling remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension.

Xpress Server in SAP POS does not require authentication for read/write/delete file access. This poses a serious security risk to data.

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials.

CVE-2017-14952 is a double free vulnerability in i18n/zonemeta.cpp in International Components for Unicode (ICU) version 59.1. It allows remote attackers to execute arbitrary code via a crafted string.

Fiyo CMS version 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the super administrator functions 'Install and Update' or 'Backup' via the view parameter in a direct request to fiyo/dapur.

SQL injection vulnerability in the Store Locator plugin versions 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files, potentially leading to denial of service due to resource consumption.

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, allowing remote attackers to execute arbitrary commands via TCP port 23.

E-Sic version 1.0 allows SQL injection via the q parameter in the esiclivre/restrito/inc/lkpcep.php file, which is part of the private search area.

In the web panel of the Airtame HDMI dongle with firmware before version 3.0, an attacker can set their own session ID via a 'Cookie: PHPSESSID=' header. This can lead to persistent access to the admin panel even after an admin password change.

Apache Solr before 7.1 is vulnerable to remote code execution, which can be exploited via an XXE attack in conjunction with the Config API add-listener command, leading to the RunExecutableListener class.

CVE-2017-10622 is an authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform that allows a remote unauthenticated attacker to log in as any privileged user. This issue affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3.

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM.

CVE-2016-1265 allows a remote unauthenticated attacker with access to Junos Space to execute arbitrary code or gain access to devices managed by Junos Space. It exploits attack vectors such as CSRF, default authentication credentials, information leak, and command injection.

The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication.

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.

HPE LoadRunner before version 12.53 Patch 4 and HPE Performance Center before version 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. In LoadRunner, this involves a heap-based buffer overflow in libxdrutil.dll.

An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. Exploiting this vulnerability allows an attacker with the same IP address to bypass authentication by accessing a specific URL.