CVE Vulnerability Catalog

In Android for MSM, Firefox OS for MSM, and QRD Android, flashing a specially crafted UBI image can lead to memory corruption or access to uninitialized memory.

In Android for MSM, Firefox OS for MSM, and QRD Android, the value of SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128, which may lead to a buffer overflow. The frame parser allows challenge text of length up to 253 bytes, while the driver cannot handle challenge text larger than 128 bytes.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overflow vulnerability occurs while parsing a Measurement Request IE in a Roam Neighbor Action Report. This affects all Android releases from CAF using the Linux kernel.

In Android for MSM, Firefox OS for MSM, and QRD Android, with all Android releases using the Linux kernel, the UnpackCore function increases the countOffset variable in each loop iteration without checking the boundary 'pIe->arraybound'.

In Android for MSM, Firefox OS for MSM, and QRD Android, a stack-based buffer overflow vulnerability exists when processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command.

CVE-2017-0866 is a privilege escalation vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1, where unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution.

VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher UI context menu to native UI functionality and privilege. Successful exploitation of this issue could result in an escalation of privilege.

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.

An injection issue was discovered in Moxa NPort 5110 (versions 2.2, 2.4, 2.6, 2.7), NPort 5130 (version 3.7 and prior), and NPort 5150 (version 3.7 and prior). An attacker may be able to inject packets that could potentially disrupt the availability of the device.

W urządzeniach Moxa NPort 5110, 5130 i 5150 występuje problem z ujawnieniem informacji związany z obsługą wypełnienia ramek Ethernet. Atakujący może wykorzystać tę lukę do uzyskania dostępu do poufnych informacji.

A Resource Exhaustion issue was discovered in Moxa NPort 5110, 5130, and 5150 that allows an attacker to exhaust memory resources by sending a large number of TCP SYN packets.

In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, allowing processes in one jail to read and modify the content of POSIX shared memory objects created by processes in another jail or the host system.

The DynamicMetadataProvider class in OpenSAML before version 2.6.1 fails to properly configure itself with the MetadataFilter plugins, leading to a lack of critical security checks such as signature verification and enforcement of validity periods.

The Dynamic MetadataProvider plugin in Shibboleth Service Provider before version 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification and enforcement of validity periods.

The HashiCorp Vagrant VMware Fusion plugin version 5.0.3, when installed without VMware Fusion, allows a local attacker to create a fake application directory and exploit the suid sudo helper to escalate privileges to root.

In the Agent Frontend in Open Ticket Request System (OTRS) versions 3.3.x through 3.3.18, a crafted URL can be used to gain information such as database user and password.

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier allows an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The issue is due to the presence of default, static user credentials for the affected virtual appliance.

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video (SDV) or video on demand (VoD) streams, resulting in a denial of service (DoS) condition. The vulnerability is due to a processing error with TCP connections to the affected device.

A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) allows an unauthenticated, remote attacker to perform multiple login attempts exceeding the configured limit. The issue is due to insufficient server-side enforcement of the login attempt limit.

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity. The issue arises from the application loading a malicious copy of a specific DLL file instead of the expected DLL file.