CVE Vulnerability Catalog

The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.

PHPMemcachedAdmin version 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to serialized data and the last part of the concatenated filename, which creates a file in the webroot.

The Konke Smart Plug K does not require authentication for TELNET sessions, allowing remote attackers to obtain 'equipment management authority' via TCP traffic to port 23.

QNAP QTS before version 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.

QNAP QTS before version 4.2.4 Build 20170313 allows attackers to gain administrator privileges and access sensitive information via unspecified vectors.

QNAP QTS versions before 4.2.4 Build 20170313 allow attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.

The ip6gre_err function in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, leading to out-of-bounds access.

The kbase_dispatch function in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, leading to an out-of-bounds read.

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.

The iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, potentially allowing remote users to access authentication credentials.

AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.

A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution with root privileges in the virtual instance running on an affected device.

Disk Sorter Enterprise versions 9.5.12 and earlier have a buffer overflow vulnerability that allows remote attackers to execute arbitrary code via a GET request.

The pe_ILF_object_p function in the Binary File Descriptor (BFD) library in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen. This can lead to crashes in programs such as addr2line, size, and strings, as well as information disclosure.

An issue was discovered in exception_wrapper.py in OpenStack Nova versions 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

ihex.c in GNU Binutils before version 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.

CVE-2016-4926 describes an insufficient authentication vulnerability in Junos Space before version 15.2R2, allowing remote users with access to the Junos Space web interface to perform certain administrative tasks without authentication.

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands. The attack can be conducted via the TABLE or QUERY parameters.

The MemcmpLowercase function in Suricata before version 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.

The jng decoder in ImageMagick version 6.8.9.9 allows remote attackers to have an unspecified impact on the system.