Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953.
Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
Zotpress plugin for WordPress SQLi in zp_get_account()
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
XSS and SQLi in huge IT gallery v1.1.5 for Joomla
Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin
Blind SQL Injection in wordpress plugin dukapress v2.5.9
Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05
Blind SQL Injection in filedownload v1.4 wordpress plugin
Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin
Remote file upload vulnerability in mailcwp v1.99 wordpress plugin
Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701.
The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.
The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow remote authenticated users with certain permissions to execute arbitrary commands via vectors involving a CALL 'SYSTEM' statement, aka SAP Security Note 2260344.
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.