CVE Vulnerability Catalog

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.

In Apache Solr, the DataImportHandler (DIH) has a feature where the entire DIH configuration can come from a request's 'dataConfig' parameter. The debug mode of the DIH admin screen uses this, which is a security risk since a DIH config can contain scripts. Starting with Solr 8.2.0, use of this parameter requires setting the Java System property 'enable.dih.dataConfigParam' to true.

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.

A type confusion vulnerability in the JavaScript engine of Firefox and Thunderbird, caused by issues with Array.pop, can lead to an exploitable crash. Targeted attacks in the wild are known.

Remote code execution vulnerability in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled. An unauthenticated remote attacker can execute arbitrary code.

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles credential recording, allowing local users to gain root access in certain parent-child process scenarios. An object lifetime issue and incorrect marking of ptrace relationship as privileged contribute.

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have an improper input validation issue (issue 5 of 6).

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. The vulnerability enables an attacker to manipulate database queries.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker could exploit this to gain elevated privileges on the system.

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.

A remote code execution vulnerability exists in Microsoft SQL Server due to improper handling of internal functions. An attacker could exploit it to execute arbitrary code on the server.

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

Linear eMerge E3-Series devices allow Command Injections. The vulnerability enables an attacker to execute arbitrary system commands on the device.

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit, the attacker would require unprivileged code execution on the victim system.

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context, then install programs; view, change or delete data. To exploit, the attacker must first log on to the system and run a specially crafted application. The security update addresses the vulnerability by correcting how AppXSVC handles hard links.