CVE Vulnerability Catalog

The Ping Module in the web interface of Technicolor TD5336 OI_Fw_v7 devices has a command injection vulnerability that allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.

Unrar version 0.0.1 (also known as unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1, unauthorized command execution is possible. The app_minivm module has an 'externnotify' program configuration option that is executed by the MinivmNotify dialplan application, allowing arbitrary shell command injection.

SimpleSAMLphp versions 1.7.0 through 1.14.10 may allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.

CVE-2017-3897 describes a vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus versions prior to 3.11.599.3. This allows network attackers to execute malicious files via an HTTP backend response.

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp version 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication due to missing character conversions before an XOR operation.

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.

A double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before version 1.7.87 allows attackers to have unspecified impact via unknown vectors.

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification could execute terminal escape sequences.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.

A vulnerability in the JSON library of Ruby (versions up to 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1) can expose arbitrary memory during a JSON.generate call. The issue lies in using strdup in ext/json/ext/generator/generator.c, which stops after encountering a null byte, returning a pointer to an empty string inconsistent with the actual length stored in space_len.

Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before version 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.

CrushFTP versions 8.x before 8.2.0 have a serialization vulnerability.

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash.

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple vulnerabilities were identified due to a lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer.

An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution.

CVE-2013-7426 identifies an insecure handling of temporary files in kamailio 4.0.1, specifically concerning the /tmp/kamailio_fifo file. This may lead to unauthorized access to data.