CVE Vulnerability Catalog

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. An attacker could exploit this to run arbitrary code in the context of the SQL Server process.

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. An attacker could exploit this to access sensitive data.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability resides in the database component and requires prior access to the system.

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. Resource exhaustion may render the service unavailable.

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. The vulnerability can be exploited remotely without authentication, posing a serious threat.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. The vulnerability can be exploited to remotely read data.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

A heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

A use-after-free vulnerability in SQL Server allows an authorized attacker to elevate privileges locally.

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification, and repeated requests may degrade service availability.

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability affects the database component and requires valid credentials.

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory.

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests.