CVE Vulnerability Catalog

In Wireshark versions 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed by adding length validation.

In Wireshark versions 2.4.0 and from 2.2.0 to 2.2.8, the Profinet I/O dissector could crash due to an out-of-bounds write. This issue was addressed by adding string validation in the file packet-dcerpc-pn-io.c.

In Wireshark versions 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, there is a vulnerability in the IrCOMM dissector that leads to buffer over-read and application crash. This issue was addressed by adding length validation in the packet-ircomm.c file.

In Wireshark 2.4.0, the Modbus dissector could crash due to a NULL pointer dereference. This was addressed by adding length validation.

ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.

Libgcrypt before version 1.8.1 does not properly consider Curve25519 side-channel attacks, making it easier for attackers to discover a secret key.

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1 allow access to the webapp directory contents by pointing to URIs like /js and /img.

Buffer overflow in mpg123 before version 1.18.0 may lead to unauthorized access or execution of malicious code.

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.

IBM Sametime Meeting Server versions 8.5.2 and 9.0 may store user credentials in the local cache of their browser, which could be accessed by a local user.

The qa-install.php file in Question2Answer before version 1.7.5 has a vulnerability that allows remote attackers to create multiple user accounts.

An unspecified server utility in NoMachine before version 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by accessing local files.

The vulnerability in diag.cgi in Pulse Connect Secure and Pulse Policy Secure allows remote attackers to hijack the authentication of administrators when attempting to start tcpdump due to a lack of anti-CSRF tokens.

SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G use non-unique X.509 certificates and SSH host keys. This may allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or impersonating a legitimate device.

Apache Struts 2.x before version 2.3.24.1 allows remote attackers to manipulate Struts internals, which may lead to altering user sessions or affecting container settings.

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors.

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain 'Super Admin' privileges via unspecified vectors.

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks.