CVE Vulnerability Catalog

In uClibc version 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.

The KBVault Mysql Free Knowledge Base application package version 0.16a includes a file management component that allows unauthenticated users to access file upload and deletion functionalities. A user can upload an ASPX script to the Uploads/Documents/ directory, enabling the execution of arbitrary code.

In devices using Anti-Web software up to version 3.8.7, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique. This is exemplified by the ability to read the password file or write to an arbitrary file using the template parameter in cgi-bin/write.cgi.

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application.

IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses inadequate account lockout settings that could allow a remote attacker to brute force account credentials.

Podatność w systemach Microsoft Windows pozwala atakującemu na przejęcie kontroli nad systemem, gdy funkcja wyszukiwania Windows nieprawidłowo obsługuje obiekty w pamięci. Dotyczy to wielu wersji systemów operacyjnych, w tym Windows XP, Vista, 7, 8, 10 oraz serwerów Windows.

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character, which can result in unintended behavior.

New Relic .NET Agent before version 6.3.123.0 introduces SQL injection flaws to safe applications through mishandling of quotes when using the Slow Queries feature.

The engine-DC-config.py script in Red Hat QuickStart Cloud Installer (QCI) before version 1.0 GA is world readable and contains the root password of the deployed system.

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service SDK could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server.

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261 and UAA versions prior to specified versions, allowing privilege escalation through arbitrary password resets with user invitations.

An issue was discovered in Pivotal PCF Elastic Runtime in versions 1.6.x prior to 1.6.65, 1.7.x prior to 1.7.48, 1.8.x prior to 1.8.28, and 1.9.x prior to 1.9.5, where several credentials were present in the logs for the Notifications errand.

An issue in Pivotal PCF Elastic Runtime allows unprivileged attackers to impersonate other users due to incomplete validation in JSON Web Token (JWT) libraries. This affects versions 1.6.x prior to 1.6.60, 1.7.x prior to 1.7.41, 1.8.x prior to 1.8.23, and 1.9.x prior to 1.9.1.

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API.

A command injection vulnerability was discovered in Cloud Foundry in versions prior to v245 and in cf-mysql-release versions prior to v31. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

nscd in the GNU C Library (glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

There is a remote stack-based buffer overflow in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. An attacker may send an overly long username string to registresult.htm, potentially allowing arbitrary code execution.

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field.

SKYSEA Client View w wersji 11.221.03 i wcześniejszych umożliwia zdalne wykonanie kodu z powodu luki w przetwarzaniu uwierzytelniania w połączeniu TCP z programem konsoli zarządzającej.

A use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.