CVE Vulnerability Catalog

A double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (libgd) before version 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files.

Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files.

Improper handling in the Autodesk FBX-SDK before version 2017.1 regarding type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers.

Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading or converting malformed FBX format files.

Off-by-one error in the phar_parse_pharfile function in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.

Joomla! versions 3.4.4 through 3.6.3 allow attackers to reset username, password, and user group assignments, and possibly perform other user account modifications via unspecified vectors.

Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.

Versions of python-jose before 1.3.2 do not use constant time comparison for HMAC keys, which can be leveraged by attackers in unspecified ways.

ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.

ZOHO WebNMS Framework versions 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, allowing attackers to obtain cleartext passwords by accessing WEB-INF/conf/securitydbData.xml.

Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter.

The Doorkeeper gem before version 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens due to failure to implement the OAuth 2.0 Token Revocation specification.

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.

The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in libtiff before version 4.0.7 allow remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.

Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size.

Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL.

CVE-2016-5742 is an SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced versions before 6.1.3 and 6.2.x before 6.2.6, as well as Movable Type Open Source version 5.2.13 and earlier. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors.