CVE Vulnerability Catalog

Go versions before 1.8.4 and 1.9.x before 1.9.1 allow remote command execution via 'go get'. By using custom domains, it is possible to configure repositories in a way that can exploit malicious code.

The default authentication protocol in IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server.

ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. A malicious user can access the application without authenticating by accessing a specific URL on the web server.

An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious attacker to access sensitive information such as HMI pages or modify PLC variables.

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

W serwerze aplikacji Jboss, dostarczanym z Red Hat Enterprise Application Platform 5.2, stwierdzono, że metoda doFilter w ReadOnlyAccessFilter HTTP Invoker nie ogranicza klas, dla których wykonuje deserializację. To pozwala atakującemu na wykonanie dowolnego kodu za pomocą spreparowanych danych serializowanych.

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

In Gemalto's HASP SRM, Sentinel HASP, and Sentinel LDK products prior to version 7.55 RTE, there is a remote capability to enable and disable the admin interface, leading to new attack vectors.

Memory corruption in Gemalto's HASP SRM, Sentinel HASP, and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 may lead to remote code execution.

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.

OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.

CVE-2017-0829 describes an elevation of privilege vulnerability in the Motorola bootloader affecting Android and the Android kernel.

CVE-2017-0828 is a privilege escalation vulnerability in the Huawei bootloader affecting Android. It concerns the Android kernel.

CVE-2017-0824 is a privilege escalation vulnerability in the Broadcom wifi driver affecting the Android kernel.

There is an elevation of privilege vulnerability in the Android system related to the camera. It affects versions 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

CVE-2017-0807 is a privilege escalation vulnerability in the Android framework (UI framework). It affects Android versions from 4.4.4 to 7.1.2.

EMC Elastic Cloud Storage (ECS) before version 3.1 is affected by an undocumented account vulnerability that could be leveraged by malicious users to compromise the system.

An SQL injection vulnerability in PhpCollab versions 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php.

OpenText Document Sciences xPression version 4.5SP1 Patch 13 (older versions might also be affected) has an XML External Entity vulnerability. An unauthenticated user can read directory listings or system files, or cause SSRF or Denial of Service.