CVE Vulnerability Catalog

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

D-Link DIR-615 before v20.12PTb04 has a second admin account with a BACKDOOR value of 0x1, which might allow remote attackers to gain access via a TELNET connection.

The Humax Wi-Fi Router model HG100R-* version 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. This vulnerability can be exploited remotely when the router is configured to expose the management console.

A stack-based buffer overflow in ASUSwrt-Merlin firmware and ASUS firmware for various ASUS devices allows remote attackers to execute arbitrary code by sending long device information that is mishandled during a strcat to a device list.

Fiyo CMS version 2.0.7 has SQL injection vulnerability in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in article_list.php that uses the parameters $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i].

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in article_status.php that uses the $_GET['id'] parameter.

Fiyo CMS version 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level'].

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in dapur/apps/app_comment/sys_comment.php, using data from $_POST and $_REQUEST.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in comment_status.php that uses the $_GET['id'] parameter.

Fiyo CMS version 2.0.7 has an SQL injection vulnerability in comment_status.php via the $_GET['id'] parameter.

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.

The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.

The FR-GV-202 issue in FreeRADIUS 2.x before version 2.2.10 allows for a buffer overflow in the rad_coalesce() function. This can lead to a daemon crash or potentially allow remote attackers to execute arbitrary code.

EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, and EMC M&R for SAS Solution Packs contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with knowledge of the default password may use these accounts to run arbitrary web service and remote procedure calls on the affected system.

Apache OpenMeetings version 1.0.0 uses weak cryptographic storage mechanisms. Additionally, the lack of captcha in registration and password reset forms, as well as missing brute force protection in authentication forms, increases the risk.

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to execute shell commands and elevate privileges.

On Junos OS devices with SNMP enabled, a network-based attacker with unfiltered access to the RE can cause the snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes can lead to a partial denial of service condition and may allow for remote code execution.