CVE Vulnerability Catalog

The Zip::File component in the rubyzip gem before version 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 are vulnerable to Unauthenticated Command Bypass attacks. Attackers can exploit unspecified vectors to conduct these attacks.

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request.

A stack-based buffer overflow vulnerability was discovered in the zebra daemon in Quagga before version 1.0.20161017 when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ, which is system-dependent, leading to message size incompatibility.

OpenText Documentum D2 version 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.

The CClient::ProcessServerPacket method in Teeworlds before version 0.6.4 allows remote servers to write to arbitrary physical memory locations, potentially leading to arbitrary code execution.

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI component responsible for processing SSL certificate information.

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI component, which improperly processes input data, allowing for remote command execution.

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI component, allowing for remote command injection.

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

An out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array, resulting in remote code execution.

An out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption and potentially lead to remote code execution.

The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability in the /inc/lists/csvexport.php file. This issue affects unauthenticated access using the GET parameter: list_id.

CMS Made Simple version 1.x before 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

In GeniXCMS before version 1.0.2, there is a vulnerability that allows CSRF token bypass, potentially leading to privilege escalation. The forgotpassword.php page can be used to acquire a token.

Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier has a remote command execution vulnerability. Authenticated users with least privileges can run arbitrary commands on the system as root via the Patch Update functionality.

An issue was discovered in certain Apple products, including iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, related to the 'CoreFoundation' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted string.

An issue was discovered in certain Apple products, including iOS before 10.2, involving the 'WebSheet' component. It allows attackers to bypass a sandbox protection mechanism via unspecified vectors.

In Facebook's HHVM versions before 3.15.0, there is an infinite recursion in wddx, allowing attackers to have unspecified impact via unknown vectors.