CVE Vulnerability Catalog

The default configuration in the Red Hat openstack-neutron package before version 2013.2.3-7 does not properly set a configuration file for rootwrap, allowing remote attackers to gain privileges via a crafted configuration file.

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

A stack-based buffer overflow in BOINC versions 6.10.58 and 6.12.34 allows remote attackers to exploit it via multiple file_signature elements.

DataLife Engine (DLE) version 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.

Symfony versions 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x are vulnerable to remote attacks that allow arbitrary PHP code execution via a serialized PHP object in the Yaml::parse or Yaml\Parser::parse functions.

The Yaml::parse function in Symfony 2.0.x before version 2.0.22 allows remote attackers to execute arbitrary PHP code via a PHP file, which is a different vulnerability than CVE-2013-1397.

A stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.

SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter.

SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.

There is an SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 versions 4.3.0.4 and 4.4.0.2. Remote attackers can execute arbitrary SQL commands via unspecified parameters.

Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail.

Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.

CVE-2014-2352 allows the directory specifier to be used to traverse the directory path, potentially enabling an attacker to access a limited number of hardcoded file types. Further exploitation may lead to a denial-of-service condition in the web server component.

Multiple untrusted search path vulnerabilities in setuid and setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.

The Stored Procedure infrastructure in IBM DB2 versions 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.

Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet.

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, making it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack.

The vulnerability in Square Squash allows remote attackers to execute arbitrary code by manipulating a YAML document in the namespace or sourcemap parameters in the deobfuscation and sourcemap functions.

The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before version 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment.

The WP ecommerce Shop Styling plugin for WordPress before version 1.8 contains a PHP remote file inclusion vulnerability in includes/generate-pdf.php, allowing attackers to execute arbitrary PHP code via the dompdf parameter.