CVE Vulnerability Catalog

The RESTful control interface (RAPI) in Ganeti before version 2.9.7 and in versions 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service (resource consumption) via SSL parameter renegotiation.

The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing 'openuri-' followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.

The TIFFReadDirEntryArray function in LibTIFF 4.0.8 mishandles memory allocation for short files, potentially leading to application crashes during tiff2pdf invocation.

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before version 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Aodh in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http. This allows remote authenticated users to obtain a Keystone token and perform unspecified authenticated actions.

Directory traversal vulnerability in ajaxfileupload.php in phpGrid by Kayson Group Ltd. before version 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in the file name.

The Qua station connection tool for Windows version 1.00.03 has an untrusted search path vulnerability. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The Teikihoukokusho Sakuseishien Tool v4.0 has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.

A vulnerability in TDB CA TypeA software version 5.2 and earlier, distributed until August 10, 2017, allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

A vulnerability in the installer for the Shin Kinkyuji Houkoku Data Nyuryoku program allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. The program was distributed until May 17, 2017.

The Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku has an untrusted search path vulnerability. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

A vulnerability in the Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.

The ReadWMFImage function in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.

The ReadMNGImage function in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function.

PHP versions 7.0.x before 7.0.21 and 7.1.x before 7.1.7 are prone to a heap use after free while unserializing untrusted data. This issue is related to the zval_get_type function in Zend/zend_types.h.

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data.

A vulnerability in the build procedure for certain executable system files on Cisco APIC devices could allow an authenticated, local attacker to gain root-level privileges. The issue arises from the use of relative search paths for libraries without proper validation.

A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) allows an authenticated, remote attacker to gain higher privileges than those assigned to their account. The attacker is granted the privileges of the last user to log in, regardless of whether those privileges are higher or lower.