CVE Vulnerability Catalog

Libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

A heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.

GeniXCMS version 0.0.8 has an SQL injection vulnerability in Posts.class.php that allows remote attackers to execute arbitrary SQL commands via the id parameter.

GeniXCMS version 0.0.8 has an SQL injection vulnerability in author.control.php that allows remote attackers to execute arbitrary SQL commands via the type parameter.

A Directory Traversal vulnerability in DashboardFileReceiveServlet in Brocade Network Advisor versions prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.

A Directory Traversal vulnerability in FileReceiveServlet in Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.

CVE-2016-2090 describes an off-by-one vulnerability in the fgetwln function in libbsd before version 0.8.2, allowing attackers to trigger a heap-based buffer overflow via unspecified vectors.

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.

An integer overflow vulnerability was observed in the regemit function in regexp.c in MuJS by Artifex Software, Inc. It requires a regular expression with nested repetition, which can lead to code execution or a denial of service (buffer overflow) condition.

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.

Barco ClickShare CSC-1 devices with firmware before version 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.

Exponent CMS version 2.3.9 has a remote code execution vulnerability in /install/index.php. An attacker can upload a malicious 'exploit.tar.gz' file to the website and then extract it, leading to arbitrary code execution.

Exponent CMS version 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload a 'php' file to the website through uploader_paste.php, then overwrite /framework/conf/config.php, leading to arbitrary code execution.

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow.

Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite.

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking.

Integer overflow leads to a TOCTOU condition in hypervisor PIL. This overflow can be exploited to bypass (Peripheral Image Loader) PIL authentication.

Improper input validation in Access Control APIs may lead to incorrect memory range checking. The issue affects the kernel version 3.18.