CVE Vulnerability Catalog

A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The issue is due to improper input validation of log file content. Successful exploitation could allow arbitrary script execution in the context of the interface or access to sensitive browser-based information.

A vulnerability in the restricted CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker with valid admin credentials to elevate privileges and execute arbitrary commands on the underlying OS as root. The issue is due to insufficient restrictions during execution of an affected CLI command. Successful exploitation could allow privilege escalation and arbitrary command execution as root.

A vulnerability in the SSL/TLS protocol inspection engine of Cisco FTD Software could allow an unauthenticated, remote attacker to bypass configured file policies on an affected system. The issue is due to errors when handling specific SSL/TLS messages. An attacker could exploit this by sending crafted HTTP packets through the system, bypassing policies and delivering a malicious payload to the protected network.

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages uploaded through the Web Portal to the Image Repository. An attacker could exploit this vulnerability by uploading a crafted tar package and viewing the log entries that are generated. A successful exploit could allow the attacker to read arbitrary files on the underlying OS.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying OS of an affected device. For more details, see the Details section of the advisory.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying OS of an affected device. For more details, see the Details section of the advisory.

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view the admin password in clear text. The issue is due to incorrect logging of the admin password when forced to change the default password on first login. Subsequent password changes are not logged and other accounts are unaffected.

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privileges. The issue is due to improper input validation of CLI command arguments. Successful exploitation could allow overwriting or reading arbitrary files on the device.

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and gain limited access. The issue is due to incorrect authentication implementation. Successful exploitation could allow viewing limited configuration details and potentially uploading a virtual machine image.

In osTicket before version 1.10.7 and versions 1.12.x before 1.12.1, a stored XSS vulnerability was discovered in setup/install.php. Lack of input sanitization in the firstname and lastname fields allows injection of malicious queries that are then executed.

In osTicket before version 1.10.7 and 1.12.x before 1.12.1, a vulnerability was found in the ticket creation form. Users can upload files, but content checks are insufficient and the server response is not handled properly, leading to persistent XSS. An attacker can upload an .html file, and the Content-Disposition header is set to inline instead of attachment, enabling cookie theft or other malicious actions.

Double Free in VLC versions <= 3.0.6 leads to a crash.

In MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view in app/webroot/js/event-graph.js, triggered when a user toggles the event graph view. A malicious MISP event must be crafted to exploit this vulnerability.

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

GNU Libc jest podatny na obejście zabezpieczeń, co pozwala atakującemu na zgadywanie adresów sterty wątków utworzonych przez pthread. Problem dotyczy komponentu glibc.

GNU Libc jest podatny na obejście mitigacji ASLR, co pozwala atakującemu na wykorzystanie pamięci podręcznej stosu wątków i sterty. Komponentem dotkniętym tą podatnością jest glibc.

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat."

http.cookiejar.DefaultPolicy.domain_return_ok in Python before 3.7.3 does not correctly validate the domain, allowing existing cookies to be sent to the wrong server. An attacker may abuse this by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.