CVE Vulnerability Catalog

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. This issue exists due to an incomplete fix for CVE-2008-4796.

In Sophos Web Appliance (SWA) before version 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection.

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

The findcore.php file in MODX Revolution version 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.

In MODX Revolution version 2.5.4-pl and earlier, the setup/controllers/welcome.php file allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI.

Siklu EtherHaul devices before version 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.

In the GUI of Ceragon FibeAir IP-10 (before version 7.2.0), a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.

Siklu EtherHaul radios before version 3.7.1 and 6.x before version 6.9.0 have a built-in, hidden root account with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface, allowing full control over the embedded Linux OS.

Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account with a default password for which the MD5 hash value is public. This account is accessible via SSH and/or TELNET, allowing full control over the underlying embedded UNIX OS.

Trango Altum AC600 devices have a built-in, hidden root account with a default password of abcd1234. This account is accessible via SSH and/or TELNET, allowing full control over the underlying embedded UNIX OS on the device.

Trango Apex, Giga, and Strata devices have a built-in, hidden root account with a default password that was stored in cleartext within a software update package. This account is accessible via SSH and/or TELNET, allowing full control over the device's operating system.

CVE-2017-5226 allows a nonprivileged session to escape the bubblewrap sandbox by using the TIOCSTI ioctl to push characters into the terminal's input buffer.

In Ambari versions 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.

Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.

Apache Camel's unmarshalling operations using Jackson and JacksonXML are vulnerable to Remote Code Execution attacks.

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 defaults to the '.athena.mit.edu' domain when opening the configuration file fails, allowing remote attackers to gain root privileges by poisoning the DNS cache.

Revive Adserver versions before 3.2.5 and 4.0.0 are vulnerable to Reflected File Download (RFD) attacks. Attackers can exploit the vulnerability in `www/delivery/asyncspc.php` to remotely download a file onto the victim's machine.