CVE Vulnerability Catalog

IBM Security Access Manager Appliance version 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands.

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

The Process function in HttpServer.cs in Ulterius before version 1.9.5.0 allows HTTP server directory traversal.

A DLL Hijacking vulnerability has been identified in AutomationDirect CLICK Programming Software and other mentioned applications. An attacker could exploit this vulnerability by renaming a malicious DLL, allowing malicious code to run at the application's privilege level.

In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, allowing remote attackers to cause a denial of service via a crafted Smacker stream.

GrootFS versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. An attacker could provide an image layer that GrootFS would consider to be the Ubuntu base layer.

The private_address_check ruby gem before version 0.4.0 is vulnerable to a bypass due to the use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as blacklisting private network addresses to prevent server-side request forgery.

An authentication vulnerability was found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. An attacker could exploit this vulnerability to gain access to additional operations by forging a JSON message.

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, files in encryption zones with world-readable permissions can be localized via YARN's localization mechanism, leading to their storage in a world-readable location.

CVE-2017-10885 describes an untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

I-O DATA DEVICE LAN DISK Connect version 2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.

The Apache OpenOffice installers before 4.1.3 contain a defect known as an 'unquoted Windows search path vulnerability'. This requires the PC to have been previously infected by a Trojan Horse application running with administrative privileges.

The 'Kickbase Bundesliga Manager' app before version 2.2.1 is vulnerable to a credentials leak due to transmitting a username and password in cleartext during registration and authentication.

CVE-2017-11169 allows remote authenticated users to obtain root privileges on iBall iB-WRA300N3GT devices by leveraging a guest/user account to submit a modified privilege parameter to /form2userconfig.cgi.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Quick Look' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.

An issue was discovered in macOS before version 10.13.1 in the 'Kernel' component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.

An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Sandbox' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in macOS versions before 10.13.1 related to the 'Kernel' component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary.

An issue was discovered in certain Apple products, including macOS before 10.13.1, involving the 'CFNetwork' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.