CVE Vulnerability Catalog

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in versions before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file.

Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage.

libcurl may read outside of a heap allocated buffer when doing FTP. A flaw in the string parser for the directory name may lead to a missing NUL byte at the end of the buffer, resulting in the potential to read data beyond the allocated memory area.

There are CSRF vulnerabilities in Subrion CMS versions 4.1.x through 4.1.5 and before 4.2.0 due to a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing attacks against the query parameter to the panel/database.

The p_lx_elf.cpp file in UPX 3.94 mishandles ELF headers, allowing remote attackers to cause application crashes or potentially have unspecified other impacts via a crafted binary file.

An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.

CVE-2017-14088 concerns memory corruption vulnerabilities in Trend Micro OfficeScan 11.0 and XG that allow local attackers to execute arbitrary code and escalate privileges to kernel-reserved resources. Exploiting this vulnerability requires prior access to execute low-privileged code on the target system.

CVE-2017-14087 is a Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) that may allow an attacker to spoof a particular Host header. This enables the attacker to render arbitrary links pointing to a malicious website with poisoned Host header webpages.

The CVE-2017-14086 vulnerability in Trend Micro OfficeScan 11.0 and XG allows unauthenticated users to start the fcgiOfcDDA.exe process or cause potential INI corruption. This may lead to excessive disk space consumption on the server due to dump files from continuous HTTP requests.

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.

An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access.

A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non-administrative users should not have access to.

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.

A memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution.

A memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution.

A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution.

IBM Spectrum Protect versions 7.1 and 8.1 disclose unencrypted login credentials to Vmware vCenter in the application trace output, which could be obtained by a local user.

IBM BigFix Compliance Analytics version 1.9.79 stores user credentials in clear text, which can be read by a local user.

A remote code execution vulnerability exists in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, which could be remotely exploited to allow code execution.