CVE Vulnerability Catalog

In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery, potentially allowing an attacker to execute unauthorized code and change the device's configuration.

An Unverified Password Change issue was discovered in the ProMinent MultiFLEX M10a Controller web interface. The application does not require the user to know the original password when setting a new password, allowing an authenticated attacker to change a user's password.

NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component that allows writing to a memory location outside the intended boundary of the buffer. This may lead to denial of service or possible escalation of privileges.

Versions 8.0.0 and 8.0.1 of TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server with the Administrator Service enabled may be vulnerable. This allows any authenticated user to gain administrative control over Managed File Transfer web applications.

The Lenovo Service Framework Android application uses a set of nonsecure credentials for integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks, potentially leading to remote code execution.

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

The web administrative portal in Zhone zNID GPON 2426A before version S3.0.501 is vulnerable to remote attacks that allow arbitrary command execution via shell metacharacters in the ipAddr parameter to zhnping.cmd.

In the web administrative portal of Zhone zNID GPON 2426A before version S3.0.501, a session key is placed in a URL, allowing remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf.

X2Engine X2CRM before version 4.0 has an unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method. This allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request.

The make_temporary_filename function in perltidy version 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to the use of the tmpnam function.

Huawei USG9560/9520/9580 devices before V300R001C01SPC300 are vulnerable to an attack that can lead to memory leaks or denial of service. Attackers can exploit a crafted website to trigger these issues.

In gollum before version 3.1.1 and gollum-lib before version 4.0.1, the presence of the string 'master' in wiki documents allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.

Aircrack-ng before version 1.2 Beta 3 has a vulnerability that allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.

The buddy-ng.c file in Aircrack-ng before version 1.2 Beta 3 contains a vulnerability that allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.

WPA and WPA2 that support IEEE 802.11r allow reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, enabling an attacker within radio range to replay, decrypt, or spoof frames.

The store_versioninfo_gnu_verdef function in radare2 2.0.0 allows remote attackers to cause a denial of service via a crafted ELF file, leading to an invalid write in r_read_le16 and application crash.

CVE-2017-9368 is an information disclosure vulnerability in the BlackBerry Workspaces Server that could allow an attacker to gain access to source code for server-side applications by crafting a request for specific files.

In GeForce Experience (GFE) 3.x before 3.10.0.55, there is a vulnerability in NVIDIA Installer Framework where a value passed from a user to the driver is used without validation. This may lead to denial of service or possible escalation of privileges.

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.