CVE Vulnerability Catalog

The XXE vulnerability in SAP Netweaver before version 7.01 allows an attacker to exploit external XML entities to gain access to system data.

Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.

The NodeManager in Apache Hadoop versions 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for the credential store provider used by the NodeManager for YARN applications.

HelpDEZk version 1.1.1 has an SQL Injection vulnerability in the loginController.php file, occurring in the selectWarning function. This issue is related to the admin/login/getWarningInfo/id/ PATH_INFO.

ImageMagick version 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

The webadmin plugin for opendreambox 2.0.0 contains a vulnerability that allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

The Ping Module in the web interface of Technicolor TD5336 OI_Fw_v7 devices has a command injection vulnerability that allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.

Unrar version 0.0.1 (also known as unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1, unauthorized command execution is possible. The app_minivm module has an 'externnotify' program configuration option that is executed by the MinivmNotify dialplan application, allowing arbitrary shell command injection.

SimpleSAMLphp versions 1.7.0 through 1.14.10 may allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.

CVE-2017-3897 describes a vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus versions prior to 3.11.599.3. This allows network attackers to execute malicious files via an HTTP backend response.

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp version 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication due to missing character conversions before an XOR operation.

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.

A double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before version 1.7.87 allows attackers to have unspecified impact via unknown vectors.

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification could execute terminal escape sequences.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.

A vulnerability in the JSON library of Ruby (versions up to 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1) can expose arbitrary memory during a JSON.generate call. The issue lies in using strdup in ext/json/ext/generator/generator.c, which stops after encountering a null byte, returning a pointer to an empty string inconsistent with the actual length stored in space_len.

Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before version 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.