CVE Vulnerability Catalog

CVE-2014-5503 describes an SQL injection vulnerability in the Guest Login Portal in Sophos Cyberoam appliances with CyberoamOS before version 10.6.1 GA. This allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.

Sophos Cyberoam appliances with CyberoamOS before version 10.6.1 GA allow remote authenticated users to inject arbitrary commands via specific opcodes.

A stack-based buffer overflow in the diagnose service in Sophos Cyberoam appliances with CyberoamOS before version 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

The default configuration in a sudoers file in the Red Hat openstack-neutron package before version 2014.1.2-4 allows remote attackers to gain privileges via a crafted configuration file.

The vyatta-clear-dhcp-lease.pl script on Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, allowing local users to gain elevated privileges by leveraging the sudo configuration.

The management console on the Brocade Vyatta 5400 in versions 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, allowing remote attackers to change other users' passwords and gain privileges via the fullname and password parameters.

The backup.php file in PHPCompta/NOALYSS before version 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the d parameter.

The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, allowing context-dependent attackers to trigger use-after-free vulnerabilities.

CVE-2014-2044 describes an incomplete blacklist vulnerability in ajax/upload.php in ownCloud before version 5.0, running on Windows. This allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter.

Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 related to buffer errors.

The XMonad.Hooks.DynamicLog module in xmonad-contrib before version 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title.

The Content Audit plugin before version 1.6.1 for WordPress contains an SQL injection vulnerability in the content-audit-schedule.php file. This allows remote attackers to execute arbitrary SQL commands via the 'Audited content types' option on the content audit page.

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty username or password.

Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_120405 allow remote attackers to hijack the authentication of administrators for various requests, such as enabling FTP access or changing the FTP administrative password.

The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, allowing remote attackers to execute arbitrary code or cause a system crash via a crafted website.

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, allowing remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic.

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service via malformed packets over an Ethernet network or a serial line.

A directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules allows remote attackers to access arbitrary resources via a crafted HTTP request.

CVE-2014-6298 in the mm_forum extension before version 1.9.3 for TYPO3 has an unrestricted file upload vulnerability. Remote attackers can upload a file with an executable extension and access it, allowing arbitrary code execution.