CVE Vulnerability Catalog

The FoFiType1C::convertToType0 function in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, allowing an attacker to launch a denial of service attack.

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file.

Lack of transport encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys, thereby bypassing the pushlink protection mechanism and gaining complete control over connected accessories.

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to a Read Access Violation on Block Data Move.

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file.

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to possible stack corruption.

Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, which may lead to potential threats.

Pulse Secure Pulse One On-Premise version 2.0.1649 and below does not properly validate requests, allowing remote users to query and obtain sensitive information.

In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill, Gfx::doPatternFill, Gfx::doTilingPatternFill, and Gfx::drawForm calls. This is a different vulnerability than CVE-2017-14519.

In Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS, there is a CSRF vulnerability that allows an authenticated user to edit global permissions. An attacker could exploit an IMG element on a wiki page opened by an administrator to assign administrator privileges to every unauthenticated user.

In Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS, there is a CSRF vulnerability that allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element related to tiki-assignuser.php.

An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to retrieve or modify storage information.

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health allows users to upload unrestricted files in versions 9.26, 9.30, and 9.40.

Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before version 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via incorrect literal handling, leading to CPM stack corruption.

Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE) attacks via vectors involving spreadsheets in OOXML files and XMP metadata in PDF and other file formats.

The cp-contact-form-with-paypal plugin before version 1.1.6 for WordPress has an SQL injection vulnerability via the cp_contactformpp_id parameter in cp_contactformpp.php.

The cp-contact-form-with-paypal plugin before version 1.1.6 for WordPress has a CSRF vulnerability that results in XSS. The issue is related to the files cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.

In Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev, libprocess crashes when handling a libprocess message wrapped in an HTTP request if the request path is empty. The parser assumes the request path always starts with '/'.

An error was found in the permission model used by X-Pack Alerting versions 5.0.0 to 5.6.0, allowing users mapped to certain built-in roles to create a watch that results in them gaining elevated privileges.

Due to improper handling of a malformed URL in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev may crash. A malicious actor can cause a denial of service of Mesos, rendering the Mesos-controlled cluster inoperable.