CVE Vulnerability Catalog

In FreeBSD through version 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition leading to an out-of-bounds read, because it can cause t2p->t_name strings to lack a final null character.

EmTec PyroBatchFTP before 3.18 allows remote servers to cause application crashes, leading to denial of service.

ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.

A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the emsd service stops. The vulnerability is due to the software's inability to process HTTP/2 packets.

A vulnerability in the web interface of Cisco License Manager software allows an unauthenticated, remote attacker to download and view files within the application that should be restricted, known as Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames.

A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the HTTP header.

A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, leading to a denial of service (DoS) condition. The issue arises from an error in how the Firepower Detection Snort Engine handles SSL traffic decryption.

A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service (DoS) condition because the Snort process restarts unexpectedly.

The Binary File Descriptor (BFD) library in GNU Binutils 2.29 has a pointer mishandling issue in dwarf1.c, which may lead to application crashes or unspecified other impacts via a crafted ELF file.

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c triggered by a malformed mpg file due to an incorrect calloc call.

ImageMagick version 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.

ImageMagick version 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.

ImageMagick version 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.

An issue with uncontrolled search path was discovered in i-SENS SmartLog Diabetes Management Software, version 2.4.0 and prior. This vulnerability allows an attacker to place a specially crafted DLL file in the search path, potentially leading to arbitrary code execution on the system.

An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges.

In Frappe versions up to 7.1.27, there is an SQL injection vulnerability in the frappe.share.get_users function that allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.

October CMS version 412 is vulnerable to PHP code execution in the file upload functionality, potentially leading to site compromise and possibly affecting other applications on the server.

Akka HTTP versions up to 10.0.5 contain a flaw related to illegal media range in the Accept header, leading to StackOverflowError. This can result in denial of service.

A malicious third-party can provide a crafted 'ssh://...' URL to an unsuspecting victim, which may result in any program on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, tricking the victim into running 'git clone --recurse-submodules' to trigger the vulnerability.