CVE Vulnerability Catalog

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many large IP fragments for reassembly in a short duration.

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages.

A vulnerability in the OAMP credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to gain elevated privileges. The issue is due to a lack of proper input validation.

In the ldap.v2 package (also known as go-ldap) up to version 2.5.0 for Go, an attacker may be able to log in with an empty password. This issue affects an application using this package if certain conditions regarding user authorization are met.

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files.

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. A login attempt in the XML-RPC interface with an XML message containing an empty member element causes wgagent to crash, logging out any user with an open session in the UI.

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new feature added in version 3.0.0 results in potential information disclosure by sending text as an unencrypted DNS query.

Bareos version 16.2.6 and earlier creates a PID file after dropping privileges to a non-root account, which may allow local users to kill arbitrary processes by modifying this file before a root script executes a 'kill `cat /pathname`' command.

The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account. This might allow local users to kill arbitrary processes by modifying this PID file before a root script executes a 'kill' command.

CVE-2015-5395 is a cross-site request forgery (CSRF) vulnerability in SOGo before version 3.1.0. An attacker can exploit this vulnerability to perform unauthorized actions on behalf of the user.

The use-after-free vulnerability in Open Litespeed before version 1.3.10 may allow unauthorized access to memory, potentially leading to unexpected application behavior.

IBM Security SiteProtector System versions 3.0, 3.1, and 3.1.1 allows local users to gain elevated privileges.

In Apache Struts versions 2.3.7 through 2.3.33 and 2.5 through 2.5.12, it is possible to prepare a special URL that can overload the server process during URL validation in a form. This issue exists due to an incomplete fix for S2-047 / CVE-2017-7672.

The REST Plugin in Apache Struts versions 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable. This allows for a DoS attack using malicious requests with specially crafted XML payload.

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

Kod obsługi BL1 FWU SMC w ARM Trusted Firmware przed wersją 1.4 może pozwolić atakującym na zapis dowolnych danych do pamięci zabezpieczonej, omijając mechanizm ochrony bl1_plat_mem_check. Może to prowadzić do odmowy usługi lub innych nieokreślonych skutków poprzez spreparowany obraz AArch32, który wywołuje przepełnienie całkowite.

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers (models 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD). A remote, unauthenticated attacker could send a specially crafted PCCC packet to the controller that could potentially cause the controller to enter a DoS condition.

The DNS packet parser in YADIFA before version 2.2.6 does not check for the presence of infinite pointer loops, which can lead to it entering an infinite loop. This can cause high CPU usage and makes the server unresponsive.

There is a cross-site request forgery (CSRF) vulnerability in the REST API in IPython 2 and 3. An attacker can exploit this flaw to perform unauthorized actions on behalf of the user.

FreeIPA might display user data improperly via vectors involving non-printable characters.