CVE Vulnerability Catalog

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying OS and overwrite or read arbitrary files. The attacker would need valid administrative credentials. The issue is due to improper input validation of CLI command arguments. Successful exploitation could allow root shell access and arbitrary file read/write.

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.

The libpcre library in PCRE before version 8.44 is vulnerable to an integer overflow. The issue occurs when a large number is used after the (?C substring in a regular expression.

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

In ext/fts3/fts3_snippet.c in SQLite before 3.32.0, a NULL pointer dereference occurs via a crafted matchinfo() query.

A vulnerability in SQLite before version 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. The fault can cause program crashes when processing certain SQL expressions.

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.

A spoofing vulnerability in Microsoft Power BI Report Server due to improper validation of uploaded attachment content-type. An authenticated attacker can upload a crafted payload, and when opened by a user, execute actions and scripts in the user's security context.

Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.

Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker could run arbitrary code in an elevated context.

Denial of service vulnerability in Connected User Experiences and Telemetry Service due to improper handling of file operations.

Information disclosure vulnerability in Windows Client Server Run-Time Subsystem (CSRSS) due to improper handling of objects in memory. An attacker must be logged on and run a specially crafted application.

A security feature bypass vulnerability in Microsoft Windows Task Scheduler service due to improper verification of client connections over RPC. A man-in-the-middle attacker could send a specially crafted request and run arbitrary code as administrator.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of crafted web requests. An authenticated attacker could perform XSS attacks and run scripts in the security context of the current user.