CVE Vulnerability Catalog

PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks.

In Wireshark versions 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed by validating the packet length.

In Wireshark versions 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This issue was addressed by validating a ULPDU length.

In Wireshark versions 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed by ensuring that write operations are bounded by the beginning of a buffer.

Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in touch_pmd(), which may lead to overwriting read-only huge pages. Although not as severe as the original 'Dirty cow' vulnerability, it allows for overwriting pages like zero huge page.

OpenDaylight Karaf version 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the cache is manually cleared (e.g. via restart).

Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, due to only general external entities being properly considered.

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service (device crash) or possibly have unspecified other impact by sending a sufficiently long string in the password field of the HTTP Basic Authentication section of the HTTP request.

Apache CXF Fediz plugins for Spring 2, 3, and 4 before versions 1.4.3 and 1.3.3 contain a CSRF vulnerability that can lead to a security context being set up using a malicious client's roles for the given end user.

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3, allowing authenticated users with permissions to edit design assets to cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.

The 'File Bridge' plugin in Squiz Matrix versions from 5.3 to 5.3.6.1 and 5.4.1.3 has an information disclosure issue caused by a Path Traversal vulnerability, allowing confirmation of the existence of files outside the bridged path.

An issue was discovered in certain Apple products, including macOS High Sierra before Security Update 2017-001, related to the 'Directory Utility' component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.

The WooCommerce plugin for WordPress through version 3.x has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which allows access to a parent directory.

The init_new_context function in the Linux kernel before version 4.12.10 does not correctly handle errors related to LDT table allocation when forking a new process. This allows a local attacker to achieve a use-after-free state or possibly have unspecified other impact by running a specially crafted program.

The mm_init function in the Linux kernel before version 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.

The vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.

The vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.