CVE Vulnerability Catalog

Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.

A remote code execution vulnerability exists in Microsoft Excel and related applications due to improper handling of objects in memory. This affects Excel versions 2010, 2013, 2016, as well as web apps and Mac versions.

A remote code execution vulnerability exists in Excel Services and various versions of Microsoft Excel and Office Online, caused by improper handling of objects in memory. This issue affects multiple versions of Excel, including 2007, 2010, 2013, and 2016, as well as web applications related to these versions.

Microsoft Office 2016 contains a remote code execution vulnerability due to improper handling of objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.

Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.

The NetBT Session Services component in Windows allows remote code execution due to failure in maintaining certain sequencing requirements. This affects multiple versions of Windows, including Windows Server 2008 R2 SP1 and Windows 10.

IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 (including DB2 Connect Server) could allow a local user to obtain elevated privileges and overwrite DB2 files.

IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 may allow a local user with DB2 instance owner privileges to gain root access.

In BlackCat CMS version 1.2.2, unrestricted file upload is possible in backend/media/ajax_rename.php via the extension parameter, allowing the extension to be changed from .jpg to .php.

IBM QRadar versions 7.2 and 7.3 disclose sensitive information to unauthorized users, which can be used to mount further attacks on the system.

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. The issue exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver, where user-supplied data is not properly validated, potentially leading to a kernel pool overflow.

The native Bluetooth stack in the Linux Kernel (BlueZ), from version 2.6.32 to 4.13.1, is vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses, resulting in Remote code execution in kernel space.

In MISP versions before 2.4.80, when configured with X.509 certificate authentication alongside a non-MISP external user management API, an unauthenticated user can gain access as an arbitrary user if the API returns an empty value.

A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to ensure page table entries remain in sync with other accounting done.

A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node for allocations, but it does not properly handle the case where `node >= MAX_NUMNODES`, leading to out-of-bounds access to an internal array.

In Apple iOS 7 through 9, there is a vulnerability related to the LEAP protocol that allows a large audio command to be sent to a targeted device, leading to a heap overflow with attacker-controlled data. This vulnerability enables full control over the device due to the high privileges of the Bluetooth stack in iOS.

CAPTCHA bypass vulnerability in MantisBT before version 1.2.19.