CVE Vulnerability Catalog

A vulnerability in the protocol detection component of Cisco Firepower Threat Defense, FirePOWER Services for ASA, and Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. This is due to improper detection of initial protocol use on a nonstandard port. An attacker could send traffic on a nonstandard port to bypass filtering and deliver malicious requests to protected systems.

A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, FirePOWER Services Software for ASA, and Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The issue is due to improper reassembly of traffic streams. An attacker could exploit this by sending crafted streams through an affected device, potentially delivering malicious requests to protected systems.

Na urządzeniach Hyundai Pay Kasse HK-1000 odkryto kanał boczny związany z wyświetlaczem OLED opartym na wierszach. Zużycie energii przez każdy cykl wyświetlacza zależy od liczby podświetlonych pikseli, co umożliwia częściowe odzyskanie zawartości wyświetlacza.

In urllib2 (Python 2.x through 2.7.17) and urllib (Python 3.x through 3.8.0), CRLF injection is possible if an attacker controls a URL parameter. The injection occurs via \r\n characters in the host component of a URL followed by an HTTP header. This is similar to CVE-2019-9740 and CVE-2019-9947 and is fixed in later Python versions.

A heap-based buffer over-read exists in the terminfo library of ncurses before version 6.1-20191012 in the fmt_entry function in tinfo/comp_hash.c.

A heap-based buffer over-read exists in the terminfo library of ncurses before version 6.1-20191012 in the _nc_find_entry function in tinfo/comp_hash.c.

The "managed-keys" feature in BIND allows automatic maintenance of keys used by trust anchors. Due to an error in this feature, a BIND server using managed-keys can exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys using an unsupported algorithm. Affected versions: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.

A vulnerability in the PAM configuration of Cisco Firepower Threat Defense (FTD), Firepower Management Center (FMC), and FXOS Software could allow an authenticated, remote attacker to cause a DoS condition. The issue is due to improper resource management in user session management. An attacker could exploit this by connecting and performing many simultaneous successful SSH logins, exhausting system resources and causing a device reload.

A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The issue is due to insufficient validation of user-supplied input. An attacker could exploit this by persuading a user to click a crafted link.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying OS with root privileges. This is due to insufficient input validation.

The documentation XML-RPC server in Python (through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4) has XSS via the server_title field. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the HTTP URL for this server.

Wersje Arm Mbed TLS przed 2.19.0 oraz Arm Mbed Crypto przed 2.0.0, przy włączonym deterministycznym ECDSA, wykorzystują generator liczb losowych z niewystarczającą entropią do osłony, co może umożliwić atakującemu odzyskanie klucza prywatnego za pomocą ataków bocznych, jeśli ofiara podpisuje tę samą wiadomość wielokrotnie.

A timing attack vulnerability on the ECDSA algorithm was discovered in the libgcrypt20 cryptographic library. An attacker can exploit timing differences in cryptographic operations to recover the private key.

Red Lion Controls Crimson w wersji 3.0 i wcześniejszych oraz w wersji 3.1 przed wydaniem 3112.00 używa twardo zakodowanego hasła do szyfrowania chronionych plików w trakcie przesyłania i w spoczynku, co może umożliwić atakującemu dostęp do plików konfiguracyjnych.

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy during ECDSA key generation. A malicious remote attacker could potentially exploit these vulnerabilities to recover ECDSA keys.

MISP versions before 2.4.115 allow privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function.

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

In the Linux kernel up to version 5.2.13, the function nbd_genl_status in drivers/block/nbd.c does not check the return value of nla_nest_start_noflag. This can lead to incorrect behavior or exploitation.

In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.