CVE Vulnerability Catalog

An issue was discovered in Ecava IntegraXor Version 5.0.413.0 related to SQL injection vulnerability in the web server. Unsanitized parameters may lead to unauthorized access to the database.

An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older, where undocumented hard-coded credentials allow access to the device.

An issue was discovered on Schneider Electric IONXXXX series power meters, including ION73XX, ION75XX, ION76XX, ION8650, ION8800, and PM5XXX. No authentication is configured by default, allowing unauthorized users to access the device management portal and make configuration changes.

Multiple integer overflows in the TRE library and musl libc can lead to memory corruption. Attackers can exploit a large number of states or tags, resulting in an out-of-bounds write.

In Exponent CMS version 2.3.9, the install/index.php file allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.

MCollective versions 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allow remote attackers to execute arbitrary code via the mco ping command.

The generate_smb_nt_hash function in GOsa allows remote attackers to execute arbitrary commands via a crafted password.

The click/install.py file in the click library does not require files in package filesystem tarballs to start with './', allowing remote attackers to install an alternate security policy and gain privileges via a crafted package.

An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).

Vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.

An issue was discovered in the node-serialize package 0.0.4 for Node.js that allows arbitrary code execution. Untrusted data passed into the unserialize() function can be exploited by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).

The Packages.php file in Simple Machines Forum (SMF) 2.1 contains a vulnerability that allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.

A heap-based buffer overflow was found in the DHCP client (udhcpc) in BusyBox before version 1.25.0. Remote attackers may exploit this vulnerability through unspecified vectors involving OPTION_6RD parsing.

A heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.

A heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.

A heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.

In NetCommWireless HSPA 3G10WVE wireless routers with firmware before version 3G10WVE-L101-S306ETS-C01_R05, the ping.cgi script allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.

The IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network to change a user's password and gain remote access to the system.

IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database.