CVE Vulnerability Catalog

Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.

eDeploy allows remote attackers to execute arbitrary code by leveraging HTTP to download files.

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource, allowing ordinary users to download configuration files. This can lead to the theft of sensitive information such as administrator accounts and passwords.

ImageMagick version 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.

NexusPHP version 1.5.beta5.20120707 has an SQL Injection vulnerability in forummanage.php via the sort parameter in an editforum action. This is a different vulnerability than CVE-2017-12981.

An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.

An authentication bypass vulnerability on UTStar WA3002G4 modems allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source.

CVE-2017-9328 describes a shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before version 3.0.34, leading to remote code execution as root.

Ruby versions before 2.4.2, 2.3.5, and 2.2.8 are vulnerable to a malicious format string containing a precious specifier (*) with a huge negative value. This situation can lead to a buffer overrun, resulting in heap memory corruption or information disclosure from the heap.

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account.

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251.

The WordPress plugin wordpress-gallery-transformation version 1.0 has a SQL injection vulnerability. The issue is in gallery.php, where the $jpic parameter is not properly sanitized before being used in an SQL query.

Vulnerability in WordPress plugin rk-responsive-contact-form version 1.0 is due to the lack of sanitization of the $delid variable before it is used in an SQL query.

Vulnerability in WordPress plugin Easy Team Manager v1.3.2 is due to the lack of sanitization of the identifier before it is used in an SQL statement. The issue is present in the file ./easy-team-manager/inc/easy_team_manager_desc_edit.php.

Vulnerability in WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey variable in questions.php before placing it in an SQL query.

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey_id variable in individual_responses.php before placing it in an SQL query.

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the action variable in survey_form.php before placing it inside an SQL query.

Vulnerability in WordPress plugin eventr version 1.02.2, due to lack of input sanitization in the edit.php form and event_form.php code, allowing for blind SQL injection via the event parameter.

Vulnerability in WordPress plugin eventr version 1.02.2, due to lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter.