CVE Vulnerability Catalog

An issue, also known as DW201703-001, was discovered in libdwarf in the function dwarf_formsdata(). A few data types were not checked for being in bounds, leading to a heap-based buffer over-read.

An issue was discovered in the libdwarf library that leads to a heap-based buffer over-read. The problem occurs in the _dwarf_decode_s_leb128_chk() function, where a byte pointer is dereferenced before being checked for bounds.

An issue was discovered in libdwarf related to a heap-based buffer over-read in the _dwarf_read_loc_expr_op() function. This problem is due to a failure to check if a pointer is within bounds.

An issue was discovered in the libdwarf library related to a heap-based buffer over-read in the dwarf_formsdata() function. This problem arises from a failure to check if a pointer is in bounds in several places in this function and a failure in a check in the dwarf_attr_list() function.

Libav versions before 12.1 are vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c.

Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

The WebUI component in Deluge before version 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.

The Codextrous B2J Contact (b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a 'safe file extension' protection mechanism, leading to remote code execution.

Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes. This page acts as a web shell, enabling command execution without client-side feedback from the web application.

A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability could lead to a buffer overflow.

An error in the 'parse_tiff_ifd()' function in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.

The Eir D1000 modem does not properly restrict the TR-064 protocol, allowing remote attackers to execute arbitrary commands via TCP port 7547. This is demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.

A boundary error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can be exploited to cause a stack-based buffer overflow.

An integer overflow error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can lead to a heap-based buffer overflow.

A remote code execution vulnerability exists in Microsoft Chakra Core related to the way JavaScript engines render when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.

A remote code execution vulnerability exists in Microsoft Chakra Core related to the way JavaScript engines render when handling objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors.