CVE Vulnerability Catalog

The libxar.so library in version 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.

The libxar.so library in version 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.

The Red Hat 3scale API Management Platform (RH-3scale) before version 2.0.0 allowed the creation of access tokens without a client secret. This flaw enables attackers to bypass authentication controls and gain access to restricted APIs.

A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. This vulnerability may allow a remote attacker to execute arbitrary code in the context of a highly privileged account.

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit, resulting in the service running with root privileges instead of the intended user privileges.

An issue was discovered in Irssi before version 1.0.4 related to updating the internal nick list. The application could incorrectly use the GHashTable interface, leading to freeing the nick during the update, resulting in use-after-free conditions on each access of the hash table.

An issue was discovered in Irssi before version 1.0.4, which occurs when receiving messages with invalid time stamps. In this case, Irssi attempts to dereference a NULL pointer.

Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware versions HEM-GW16A-FW-V1.2.0 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.

The Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware contains hard-coded credentials, which may allow attackers to perform operations on the device with administrative privileges.

Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware versions V1.2.0 and earlier allow an attacker to bypass access restrictions to change the administrator account password.

The firmware of Toshiba Home gateway HEM-GW16A and HEM-GW26A in versions V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen, enabling operations with administrative privileges.

The vulnerability in EbidSettingChecker.exe (version 1.0.0.0) related to an untrusted search path allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The D-Link DIR-615 device before v20.12PTb04 does not use SSL for any authenticated pages, exposing users to data theft. An attacker can monitor network traffic to capture user credentials.

On D-Link DIR-615 devices before v20.12PTb04, once authenticated, user identification is based on the IP address of their machine. An attacker, by spoofing the victim's IP address, may take over the administrative session without needing authentication credentials.

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

A vulnerability in FineCMS up to July 7, 2017 allows remote PHP code execution by placing code after "<?php" in a route=template request.

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server allows an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The issue is due to improper shell invocations.

A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) allows an unauthenticated, remote attacker to gain full access to the system. The issue is due to static, default credentials for the Cisco ESC UI that are shared between installations.