CVE Vulnerability Catalog

CVE-2014-0607 in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 has an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading and launching an executable file.

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a large or negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message.

A heap-based buffer overflow in Autodesk SketchBook Pro before version 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file.

Integer overflow in Autodesk SketchBook Pro before version 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, triggering a heap-based buffer overflow.

The ConvolveHorizontally function in Skia, used in Mozilla Firefox before version 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution. This allows remote attackers to execute arbitrary code by triggering prolonged image scaling.

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.

A use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

A use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content.

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, allowing remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

A use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.

There is a buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier, which may lead to unspecified impacts.

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, allowing remote attackers to read arbitrary code and possibly have other unspecified impacts related to an XML External Entity (XXE) issue.

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page.

Elasticsearch Logstash versions 1.0.14 through 1.4.x before 1.4.2 allow remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs.

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

CVE-2014-5017 is an SQL injection vulnerability in the LimeSurvey application in the participantsaction.php file, allowing remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request.