CVE Vulnerability Catalog

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders/mpc.c.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders/png.c.

ImageMagick version 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.

An issue in the session logic in Unitrends Backup (UB) before version 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges.

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue exists in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset. This vulnerability affects several BMW, Ford, Infiniti, and Nissan models produced between 2009-2016, potentially allowing an attacker to execute remote code on the TCU's baseband radio processor.

An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. A malicious user can access internal information about status and connected devices by accessing a specific URL on the web server without authentication.

A vulnerability in the SSL Decryption and Inspection feature of Cisco Firepower System Software may allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic. The issue arises from unexpected interaction with SSL policy settings when the software receives unexpected SSL packet headers.

A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected application does not properly validate Fragmentation Unit (FU-A) protocol packets.

A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) allows an authenticated, remote attacker to conduct a blind SQL injection attack. The issue is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters.

A vulnerability in the Web UI application of the Cisco Prime Collaboration Provisioning Tool through version 12.2 allows an unauthenticated, remote attacker to execute unwanted actions. The issue is due to a lack of defense against cross-site request forgery (CSRF) attacks.

A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) versions 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks.

A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system.

A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, even after the certificate for the autonomic node has been revoked. This affects devices running Release 16.x of Cisco IOS XE Software configured to use Autonomic Networking.

Cisco Data Center Network Manager is affected by excessive logging during a TCP Flood on Java ports. The large size of server.log leads to increased CPU utilization.

In the libmspack library version 0.5alpha, used in ClamAV 0.99.2, there is a vulnerability that allows remote attackers to cause a denial of service through a heap-based buffer overflow, leading to application crashes. The attack can be executed using a crafted CHM file.

OpenCV through version 3.3 has an out-of-bounds write error in the FillColorRow4 function in utils.cpp when reading an image file using cv::imread.

OpenCV versions up to 3.3 contain an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file using cv::imread.

OpenCV up to version 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file using cv::imread.

OpenCV through version 3.3 has an invalid write in the cv::RLByteStream::getBytes function, which may lead to a buffer overflow when reading an image file using cv::imread.