CVE Vulnerability Catalog

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT UPDATE' section.

The DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 contains a vulnerability that allows an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption issue.

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.

EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.

The upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. This issue was identified until September 12, 2017.

The Gwolle Guestbook plugin before version 1.5.4 for WordPress has a PHP remote file inclusion vulnerability when allow_url_include is enabled. This allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php.

Ellucian Banner Student versions 8.5.1.2 through 8.7 allow remote attackers to reset arbitrary passwords via unspecified vectors, referred to as 'Weak Password Reset.'

Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Blue Coat Malware Analysis Appliance (MAA) before version 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism, potentially leading to writing to arbitrary files, causing denial of service (host reboot or reset to factory defaults), or executing arbitrary code.

Kura before version 2.1.0 has a vulnerability that allows taking control over the device's firewall configuration, but does not allow setting IPv6 firewall rules. The Equinox console port 5002 remains open, allowing login to Kura without user credentials over unencrypted telnet and executing commands as 'root'.

EE 4GEE WiFi MBB devices (before version EE60_00_05.00_31) allow remote attackers to obtain sensitive information via a JSONP endpoint, potentially exposing passwords and SMS content.

A stack-based buffer overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before version 0.18.3. It could allow a remote denial of service or code execution attack.

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

SQL Injection exists in the EyesOfNetwork web interface (eonweb) 5.1-0 via the user_id cookie to header.php.

CVE-2017-14242 is an SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 that allows remote attackers to execute arbitrary SQL commands via the statut parameter.

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter.

In the mboxlist_do_find function in Cyrus IMAP before version 3.0.4, an off-by-one error in prefix calculation for the LIST command led to the use of uninitialized memory. This may allow remote attackers to obtain sensitive information or cause a daemon crash.

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, Integra 500, and iSite ATG consoles. An attacker may create an application user account to gain administrative privileges.