CVE Vulnerability Catalog

DenyAll WAF before version 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php and then reading the iToken field in the reply.

Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.

Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.

CA Identity Manager versions r12.6 to r12.6 SP8, 14.0, and 14.1 allow remote attackers to potentially identify passwords of locked accounts through an exhaustive search.

In sam2p version 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. This can also cause a write to an illegal address.

Due to an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. This also causes memory corruption due to an attempted write to the invalid d[0xfffffffe] array element.

An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5.

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function. The issue is caused by improper length computation of the allocated data of an ExifMnote entry, which can lead to denial-of-service or possibly information disclosure.

Version 1.0.46-1 of pure-ftpd shipped in Fedora was vulnerable to a packaging error that caused the original configuration to be ignored after an update, resulting in the service running with the default configuration.

The Tapatalk plugin before version 4.5.8 for MyBB contains an SQL injection vulnerability in mobiquo/lib/classTTForum.php, allowing an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent during the user registration process.

A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

In TecnoVISION DLX Spot Player4 (all known versions), a hard-coded password 'tecn0visi0n' for the dlxuser account allows remote attackers to log in via SSH.

In FreeIPA before version 4.2.2, the ipa-kra-install script places the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

Xiph.Org libvorbis version 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels is less than or equal to 0.

In sam2p version 0.49.3, there is an integer signedness error in the pcxLoadRaster function in in_pcx.cpp, leading to a heap-based buffer overflow.

In sam2p version 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation.

In version 0.49.3 of sam2p, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.