CVE Vulnerability Catalog

An issue was discovered in certain Apple products, including macOS before 10.12.4, involving mishandling of profile uninstall actions in the 'MCX Client' component when a profile has multiple payloads. This allows remote attackers to bypass intended access restrictions.

IBM Curam Social Program Management versions 6.0 and 7.0 are vulnerable to a denial of service caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume all available memory resources.

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier have an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead to arbitrary code execution.

Snoopy allows remote attackers to execute arbitrary commands. This vulnerability exists due to an incomplete fix for CVE-2014-5008.

Snoopy allows remote attackers to execute arbitrary commands.

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. This issue exists due to an incomplete fix for CVE-2008-4796.

In Sophos Web Appliance (SWA) before version 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection.

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

The findcore.php file in MODX Revolution version 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.

In MODX Revolution version 2.5.4-pl and earlier, the setup/controllers/welcome.php file allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI.

Siklu EtherHaul devices before version 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.

In the GUI of Ceragon FibeAir IP-10 (before version 7.2.0), a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.

Siklu EtherHaul radios before version 3.7.1 and 6.x before version 6.9.0 have a built-in, hidden root account with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface, allowing full control over the embedded Linux OS.

Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account with a default password for which the MD5 hash value is public. This account is accessible via SSH and/or TELNET, allowing full control over the underlying embedded UNIX OS.

Trango Altum AC600 devices have a built-in, hidden root account with a default password of abcd1234. This account is accessible via SSH and/or TELNET, allowing full control over the underlying embedded UNIX OS on the device.

Trango Apex, Giga, and Strata devices have a built-in, hidden root account with a default password that was stored in cleartext within a software update package. This account is accessible via SSH and/or TELNET, allowing full control over the device's operating system.

CVE-2017-5226 allows a nonprivileged session to escape the bubblewrap sandbox by using the TIOCSTI ioctl to push characters into the terminal's input buffer.

In Ambari versions 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.