CVE Vulnerability Catalog

A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in responses. The issue is due to improper input sanitization. An attacker could exploit this by persuading a user to click a crafted link, enabling CRLF injection and redirecting users to arbitrary websites.

A vulnerability in the SIP inspection process of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a DoS condition. The issue is due to a watchdog timeout and crash during cleanup of threads associated with a SIP connection being deleted. An attacker could exploit this by sending a high rate of crafted SIP traffic.

Multiple vulnerabilities in the secure boot process of Cisco ASA and FTD Software for Firepower 1000 and 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The vulnerabilities are due to insufficient protections of the secure boot process. An attacker could inject code into specific files referenced during boot, allowing them to break the chain of trust and maintain persistence across reboots.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. This is due to undocumented configuration commands. Successful exploitation could allow configuration changes to sections that should not be exposed to CLI access.

A vulnerability in the Snort detection engine of multiple Cisco products could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The issue is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker could send crafted HTTP packets through an affected device, potentially bypassing the policy and delivering a malicious payload.

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed.

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix-like systems, the system's temporary directory is shared between all users, and files and directories written there are by default readable by other users on the same system. This vulnerability impacts you if JUnit tests write sensitive information, like API keys or passwords, into the temporary folder and execute in an environment with other untrusted users.

If an HTTP/2 client connecting to Apache Tomcat exceeds the agreed maximum number of concurrent streams for a connection, a subsequent request may contain HTTP headers from a previous request instead of the intended ones. This could lead to users seeing responses for unexpected resources.

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

A lock was missing when accessing a data structure and importing certificate information into the trust database. Affects Firefox < 80 and Firefox for Android < 80.

Vulnerability in Firefox (and Firefox for Android) before version 80. When trying to load a non-video in an audio/video context, the exact status code (e.g., 200, 302, 404, 500) is disclosed via the MediaError message. This information leakage may allow inferring login status to services or device discovery on a local network.

Vulnerability in Firefox browser and Thunderbird mail client. A malicious webpage could access the InstallTrigger object, potentially leading to installation of an unintended or malicious extension.

A basic XSS vulnerability in Fortinet products due to improper neutralization of script-related HTML tags. An attacker may execute unauthorized code or commands via network exploitation.

The Verint Workforce Optimization suite version 15.1 (15.1.0.37634) has an unauthenticated information disclosure vulnerability via API. An attacker without valid credentials can access sensitive data.

In Spring Framework versions 5.2.0-5.2.8, 5.1.0-5.1.17, 5.0.0-5.0.18, 4.3.0-4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

A flaw was found in the Linux kernel before version 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

A flaw in the ZRAM kernel module of the Linux kernel before 5.8-rc6 allows a local user with read access to /sys/class/zram-control/hot_add to create ZRAM devices in /dev. This read allocates kernel memory not accounted for the user, and continuous reading can exhaust system memory, triggering the OOM killer and potentially making the system inoperable.

W jądrze Linuksa zidentyfikowano lukę w pamięci w sterownikach ethernetowych, która pozwala na odczyt nieinicjowanych wartości z pamięci jądra. Luka ta może być wykorzystana przez lokalnego użytkownika do uzyskania dostępu do poufnych danych.