CVE Vulnerability Catalog

Mahara versions 15.04 before 15.04.10, 15.10 before 15.10.6, and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email. When the user changes the default email, Mahara fails to invalidate the old link, allowing access to the user's account.

Mahara versions 15.04 before 15.04.7 and 15.10 before 15.10.3 running on PHP 5.3 are vulnerable to one user being logged in as another user on a separate computer due to the same session ID being served. This situation can occur when a user takes an action that forces another user to be logged out of Mahara.

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented.

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory.

WordPress versions before 4.8.3 are affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries, leading to potential SQL injection (SQLi) in plugins and themes.

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process.

The SSH Plugin stores credentials that allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

A Use of Hard-coded Credentials issue was discovered in Korenix JetNet software, which may allow an attacker to gain remote access to devices.

A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G, JetNet5310G, JetNet5428G-2G-2FX, JetNet5628G-R, JetNet5628G, JetNet5728G-24P, JetNet5828G, JetNet6710G-HVDC, and JetNet6710G. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.

MongoDB versions 3.4.x before 3.4.10 and 3.5.x-development have a disabled-by-default configuration setting, networkMessageCompressors, which when enabled can be exploited by a malicious attacker to deny service or modify memory.

Versions of EMC Unisphere for VMAX Virtual Appliance, EMC Solutions Enabler Virtual Appliance, EMC VASA Virtual Appliance, and EMC VMAX Embedded Management prior to specified versions contain an authentication bypass vulnerability. This vulnerability may be exploited by malicious users to compromise the affected system.

A vulnerability in libcurl related to improper handling of IMAP FETCH responses when the data size is zero bytes. The deliver-data function may attempt to read data from a buffer that is not properly terminated, potentially leading to reading memory beyond the allocated area.

An SQL Injection vulnerability exists in HP ArcSight ESM and HP ArcSight ESM Express in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.

Zomato Clone Script allows SQL Injection via the resid parameter in the restaurant-menu.php file.

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

Vastal I-Tech Agent Zone (also known as The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, and in searchResidential.php via the property_type, city, or bedroom parameter.

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

The Online Exam Test Application allows SQL Injection via the sort parameter in resources.php in a category action.

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.