CVE Vulnerability Catalog

CVE-2017-17106 allows unauthenticated remote attackers to obtain credentials for Zivif PR115-204-P-RS V2.3.4.2103 webcams via a standard HTTP request. The vulnerability exists due to a lack of authentication checks in requests to CGI pages.

Zivif PR115-204-P-RS web cameras in versions V2.3.4.2103 and V4.7.4.2121 (and possibly in between versions) are vulnerable to unauthenticated, blind remote command injection via CGI scripts used in the web interface.

The AccessKeys AccessPress Anonymous Post Pro plugin for WordPress versions up to 3.1.9 has an issue with improper input sanitization. This allows an attacker to override settings for allowed file extensions and upload file size, leading to the ability to upload any files to the server.

The CVE-2017-15877 vulnerability in the db.php file in GPWeb 8.4.61 has insecure permissions that allow remote attackers to view the password and user database.

CVE-2017-15875 is a SQL injection vulnerability in the Password Recovery feature in GPWeb 8.4.61. It allows remote attackers to execute arbitrary SQL commands via the 'checkemail' parameter.

The Application Firewall Pack (AFP) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.

Paid To Read Script version 2.0.5 has an SQL Injection vulnerability via the uid parameter in admin/userview.php, the fnum parameter in admin/viewemcamp.php, or the fn parameter in admin/viewvisitcamp.php.

Bus Booking Script version 1.0 has an SQL Injection vulnerability via the txtname parameter in admin/index.php.

FS Lynda Clone version 1.0 has a SQL Injection vulnerability via the keywords parameter in the tutorial/ path.

The BrightSign Digital Signage (4k242) device with firmware version 6.2.63 and below has a directory traversal vulnerability via the rp parameter in /storage.html, allowing an attacker to read or write files.

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.

CMS Made Simple (CMSMS) before version 2.2.5 does not properly cache login information in sessions.

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.

DedeCMS through 5.7 is vulnerable to SQL Injection via the $_FILES superglobal in plus/recommend.php.

DedeCMS versions up to 5.7 are vulnerable to SQL Injection via the logo parameter in plus/flink_add.php.

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Trape before 2017-11-05 has SQL injection vulnerability via various parameters, including /nr red, /nr vId, and many registration-related parameters.

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator password in base64 encoding in the returned web page.