CVE Vulnerability Catalog

All iRODS versions before 4.1.11 and 4.2.1 are vulnerable, allowing other iRODS users (potentially anonymous) to execute remote shell commands via iRODS virtual pathnames. Exploiting this vulnerability involves retrieving a virtual iRODS pathname containing a semicolon using igetwild.

An issue was discovered on Accellion FTA devices before FTA_9_12_180 due to the misuse of mysql_real_escape_string. This allows SQL injection via the app_id parameter in seos/courier/communication_p2p.php.

An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to a regular expression that lacks an initial ^ character. This allows SSRF attacks with the file:///etc/passwd#https:// URL pattern.

An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to LDAP Injection. The POST parameter 'filter' in ldaptest.html can be exploited.

An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to an SQL injection vector via report_error.php?year='payload.

An issue was discovered on Accellion FTA devices before FTA_9_12_180 that allows Remote Code Execution using shell metacharacters in the method parameter seos/1000/find.api.

The pcre2test.c file in PCRE2 version 10.23 contains a vulnerability that allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.

Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command.

Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro are vulnerable to memory corruption while parsing a malformed Mach-O file.

Quick Heal Internet Security, Total Security, and AntiVirus Pro version 10.1.0.316 are vulnerable to memory corruption while parsing a malformed Mach-O file.

Quick Heal Internet Security, Total Security, and AntiVirus Pro version 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of WIM Header. This vulnerability can be exploited for Remote Code Execution and Privilege Escalation.

Vaultive O365 versions before 4.5.21 have an issue with handling PGP/MIME messages injected via IMAP or SMTP. The change in Content-Type header causes most mail user agents to be unable to decrypt the message correctly, leading to a denial of service.

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.

Pexip Infinity before version 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes.

The Cloud Controller in Cloud Foundry before version 239 logs user-provided service objects at creation, allowing attackers to obtain sensitive user credential information via unspecified vectors.

TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a 'pattern with very many captures.'

The vulnerability in lxc-attach in LXC before version 1.0.9 and 2.x before version 2.0.6 allows an attacker inside an unprivileged container to use an inherited file descriptor from the host's /proc to access the rest of the host's filesystem via the openat() family of syscalls.