CVE Vulnerability Catalog

It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks.

In systemd versions 223 through 235, a remote DNS server can respond with a custom crafted NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service, causing a DoS of the affected service.

In CVE-2017-7341, an authenticated admin user can execute arbitrary system console commands via crafted HTTP requests on the file management AP script download webUI page in Fortinet FortiWLC.

The Private Internet Access (PIA) application from London Trust Media before version 1.3.3.1 for Android allows remote attackers to cause application crashes by providing a large VPN server-list file.

A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code.

CVE-2017-15880 is an SQL injection vulnerability in the EyesOfNetwork web interface (eonweb) version 5.1-0 that allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php.

CSV Injection (also known as Excel Macro Injection or Formula Injection) exists in KeystoneJS before version 4.0.0-beta.7 via a value that is mishandled in a CSV export.

IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13) could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.

IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication.

IBM System Storage Storwize V7000 Unified versions 1.5 and 1.6 use weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information.

IBM Daeja ViewONE Professional, Standard, and Virtual versions 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate.

The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression 'function()'. Examples include a 'function(){console.log(' call or a simple infinite loop.

Redis before version 3.2.7 is vulnerable to 'Cross Protocol Scripting' due to a lack of checks for POST and Host: strings, which are not valid in the Redis protocol.

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.

Cloud Foundry Runtime before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via emails with password recovery links, known as 'Cross Domain Referer Leakage.'

Cloud Foundry Runtime versions before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request forgery (CSRF) attacks on PWS, enabling them to log a user into an arbitrary account due to a lack of CSRF checks.

Cisco WebEx Meetings Server before version 1.1 uses meeting IDs with insufficient entropy, allowing remote attackers to bypass authentication and join arbitrary meetings without a password.

The apr_time_exp*() or apr_os_exp_time*() functions in Apache Portable Runtime (APR) version 1.6.2 and prior may access out of bounds memory when invoked with an invalid month field value. This could lead to revealing the contents of another static heap value or program termination.

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the ping_addr parameter to PingIframeRpm.htm or the dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php.