CVE Vulnerability Catalog

In libxslt 1.1.33, the xsltCopyText function does not reset a pointer under certain circumstances. This may lead to writing data outside a buffer or disclosing uninitialized data.

Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.

W serwerze API Kubernetes w wersjach v1.0-1.12 oraz wcześniejszych niż v1.13.12, v1.14.8, v1.15.5 i v1.16.2 występuje niewłaściwa walidacja danych wejściowych, co pozwala autoryzowanym użytkownikom na wysyłanie złośliwych ładunków YAML lub JSON. Może to prowadzić do nadmiernego zużycia CPU lub pamięci, co potencjalnie skutkuje awarią serwera API.

A vulnerability in Sunny WebBox Firmware version 1.6 and earlier allows an attacker to send a malicious link to an authenticated operator. Upon clicking, the attacker can remotely perform actions with the user's permissions, exploiting the device's reliance on IP addresses for session maintenance after login.

A vulnerability in the IKEv1 feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a DoS condition. The issue is due to improper management of system memory. An attacker could send malicious IKEv1 traffic without valid credentials, leading to memory exhaustion and device reload.

A vulnerability in the CLI of Cisco FXOS and FTD Software could allow an authenticated, local attacker to execute commands on the underlying OS with root privileges. The issue is due to insufficient input validation. An attacker could exploit this by including crafted arguments to specific CLI commands.

A vulnerability in the WebVPN feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The issue is due to excessive processing load for a specific WebVPN HTTP page request. An attacker could send multiple WebVPN HTTP page load requests for a specific URL, leading to increased CPU load and DoS.

A vulnerability in the SIP inspection module of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to improper parsing of SIP messages.

A vulnerability in the OSPF implementation of Cisco ASA and FTD Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS). The issue is due to improper parsing of certain options in OSPF LSA type 11 packets. An attacker could exploit this by sending a crafted LSA type 11 OSPF packet.

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these by modifying critical files, leading to root command execution and impacting other FTD instances.

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these by modifying critical files, leading to root command execution and impacting other FTD instances.

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. It is due to insufficient validation of FTP data. An attacker could exploit this by sending malicious FTP traffic through the device.

Red Lion Controls Crimson w wersji 3.0 i wcześniejszych oraz w wersji 3.1 przed wydaniem 3112.00, pozwala na wykorzystanie wielu podatności, gdy ważny użytkownik otworzy specjalnie przygotowany, złośliwy plik wejściowy, który może odwoływać się do pamięci po jej zwolnieniu.

Red Lion Controls Crimson w wersji 3.0 i wcześniejszych oraz w wersji 3.1 przed wydaniem 3112.00 pozwala na wykorzystanie wielu podatności, gdy ważny użytkownik otworzy specjalnie przygotowany, złośliwy plik wejściowy, co prowadzi do niewłaściwego zarządzania wskaźnikami przez program.

Red Lion Controls Crimson w wersji 3.0 i wcześniejszych oraz w wersji 3.1 przed wydaniem 3112.00, pozwala na wykorzystanie wielu podatności, gdy uprawniony użytkownik otworzy specjalnie przygotowany, złośliwy plik wejściowy, który działa poza wyznaczonym obszarem pamięci.