CVE Vulnerability Catalog

The Linux kernel version 3.3-rc1 and later is affected by a vulnerability related to the processing of incoming L2CAP commands - ConfigRequest and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state.

In Fossil versions before 2.4, the SSH sync protocol allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname.

The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to remote code execution. This affects various versions of Windows and Exchange servers.

IBM Atlas eDiscovery Process Management version 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

IBM Security Guardium versions 9.0, 9.1, and 9.5 supports interaction between multiple actors who negotiate which algorithm should be used as a protection mechanism, such as encryption or authentication. However, it does not select the strongest algorithm available to both parties.

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.

In the Linux kernel up to version 4.14.4, there is no requirement for the CAP_NET_ADMIN capability for add_callback and remove_callback operations in net/netfilter/xt_osf.c. This allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.

In the Linux kernel up to version 4.14.4, there is no requirement for the CAP_NET_ADMIN capability for new, get, and del operations in net/netfilter/nfnetlink_cthelper.c. This allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.

An issue was discovered in the software on Vaultek Gun Safe VT20i products related to the lack of encryption of the session between the Android application and the safe. Despite marketing materials claiming that this communication is encrypted, this is not true.

An issue was discovered in Vaultek Gun Safe VT20i products that allows an attacker to remotely unlock the safe without a valid PIN code. Although the mobile application requires a PIN, the safe does not verify it, enabling authorization with any value.

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with auth0.popup.callback().

NVIDIA mediaserver contains a vulnerability where a use after free malfunction can occur due to an incorrect bounds check, which could enable unauthorized code execution and possibly lead to elevation of privileges.

The NVIDIA driver contains a vulnerability where a use after free malfunction can occur due to improper usage of the list_for_each kernel macro. This could enable unauthorized code execution and possibly lead to elevation of privileges.

The NVIDIA driver contains a vulnerability where a use after free malfunction can occur due to a race condition, potentially enabling unauthorized code execution and possibly leading to elevation of privileges.

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault.

CVE-2017-13175 is an information disclosure vulnerability in the NVIDIA libwilhelm affecting the Android kernel.

CVE-2017-13174 is a privilege escalation vulnerability in the Android kernel. It affects Android kernel versions and may allow unauthorized access to system resources.

There is an elevation of privilege vulnerability in the MediaTek system server. This affects the Android kernel.

CVE-2017-13172 is a privilege escalation vulnerability in the MediaTek Bluetooth driver affecting the Android kernel.

CVE-2017-13171 describes an elevation of privilege vulnerability in the MediaTek performance service on Android. It affects the Android kernel.