CVE Vulnerability Catalog

The XXE vulnerability in Milton Webdav before version 2.7.0.3 allows an attacker to exploit external XML entities to gain access to system data.

An issue was discovered in Personify360 e-Business versions 7.5.2 through 7.6.1 that allows anyone to add a vendor account or read existing vendor account data, including usernames and passwords, by accessing the /TabId/275 URI.

Game-music-emu before 0.6.1 mishandles unspecified integer values.

The Fedora Nagios package uses 'nagiosadmin' as the default password for the 'nagiosadmin' administrator account, making it easier for remote attackers to gain access by leveraging knowledge of the credentials.

TeamPass versions before 2.1.27.4 are vulnerable to a SQL injection in users.queries.php.

Dolibarr ERP/CRM versions before 5.0.3 are vulnerable to SQL injection in user/index.php, in the search_supervisor and search_statut parameters.

Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass, which can be easily read by an attacker.

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. An attacker can exploit the bauth cookie to access cgi-bin/MANGA/admin.cgi, allowing for enumeration of user accounts.

A stack-based buffer overflow in dnstracer through version 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument mishandled in a strcpy call for argv[0].

Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.

The Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx.

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c.

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the 'Broadpwn' issue.

BigTree CMS version 4.2.18 has an unrestricted file upload vulnerability. An attacker can upload an 'xxx.pht' or 'xxx.phtml' file, allowing them to bypass safety checks and execute arbitrary code.

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges.

Ceragon FibeAir IP-10 has a default SSH public key in the authorized_keys file for the mateidu user, allowing remote attackers to gain SSH access by leveraging knowledge of the private key.

Samba w wersjach od 3.5.0 do 4.6.4, 4.5.10 i 4.4.14 jest podatna na zdalne wykonanie kodu. Złośliwy klient może przesłać bibliotekę współdzieloną do zapisywalnego udziału, a następnie spowodować, że serwer ją załaduje i wykona.

RMI vulnerability in Hitachi Device Manager before version 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.