CVE Vulnerability Catalog

The do_mmu_update function in arch/x86/mm.c in Xen versions 3.2.x through 4.4.x does not properly manage page references, allowing remote domains to cause a denial of service by leveraging control over an HVM guest and a crafted MMU_MACHPHYS_UPDATE.

The DB dialplan function in Asterisk Open Source before versions 1.8.32, 11.1.4.1, 12.7.1, and 13.0.1, and Certified Asterisk before versions 1.8.28-cert8 and 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.

The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, allowing remote attackers to bypass intended PJSIP ACL rules.

The generate_password function in Moodle through 2.4.11, and in versions 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a sufficient number of possible temporary passwords, allowing remote attackers to gain access via a brute-force attack.

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.

A stack-based buffer overflow in the date_from_ISO8601 function in PHP before version 5.2.7 can be exploited by remote attackers. Including a timezone field in a date leads to improper XML-RPC encoding, potentially causing application crashes or arbitrary code execution.

Multiple SQL injection vulnerabilities in Gogs (Go Git Service) versions 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter in the api/v1/repos/search and api/v1/users/search endpoints.

In Gogs (Go Git Service) versions 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta, there is an SQL injection vulnerability in the GetIssues function. Remote attackers can execute arbitrary SQL commands via the label parameter to user/repos/issues.

A stack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, allows remote attackers to execute arbitrary code via a crafted ip_address parameter in an HTML document.

The Protected Pages module 7.x-2.x before 7.x-2.4 for Drupal allows remote attackers to bypass the password protection via a crafted path.

Multiple SQL injection vulnerabilities in vldPersonals before version 2.7.1 allow remote attackers to execute arbitrary SQL commands via the (1) country, (2) gender1, or (3) gender2 parameter in a search action to index.php.

Lantronix xPrintServer does not properly restrict access to ips/, allowing remote attackers to execute arbitrary commands via the c parameter in an rpc action.

The DigitalVidhya Digi Online Examination System 2.0 has an unrestricted file upload vulnerability in the photo functionality, allowing remote attackers to execute arbitrary code by uploading a file with an executable extension.

In Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point, a vulnerability in cgi/utility.cgi allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.

The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations.

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors. This is a different vulnerability than CVE-2014-5342.

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, allowing remote attackers to bypass authentication and execute administrative actions via unknown vectors.

The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors.

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 is vulnerable to remote command execution by attackers via unspecified vectors. This is a different vulnerability than CVE-2014-6627.

Multiple unspecified vulnerabilities in Google Chrome before version 39.0.2171.65 may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.