CVE Vulnerability Catalog

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.

In NTP ntpd versions 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77, the 'pidfile' or 'driftfile' directives allow remote attackers with access to configuration to write to arbitrary files via the :config command.

An issue was discovered in Tilde CMS version 1.0.1 that allows bypassing the implemented restrictions on arbitrary file upload via filename manipulation with .php extension.

An issue was discovered in Tilde CMS version 1.0.1 that allows arbitrary files to be read via a file=../ attack on actionphp/download.File.php.

Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc.

In the Linux kernel up to version 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, the dir value of xfrm_userpolicy_id is not ensured to be XFRM_POLICY_MAX or less. This can lead to denial of service (out-of-bounds access) or possibly other unspecified impacts via an XFRM_MSG_MIGRATE xfrm Netlink message.

There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.

There is a floating point exception in the Exiv2::ValueType function in Exiv2 version 0.26 that can lead to a remote denial of service attack via crafted input.

There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack.

There is a directory traversal vulnerability in the filename parameter to the /download.conf URI on Cisco DDR2200 and DDR2201v1 devices.

FontForge version 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c), which may lead to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a buffer over-read in the strnmatch function (char.c), which may lead to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a heap-based buffer overflow in the readcffset function (parsettf.c), which may lead to DoS attacks or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c), which may lead to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a heap-based buffer over-read in the readcfftopdicts function (parsettf.c), which may lead to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a stack-based buffer overflow in the addnibble function (parsettf.c), potentially leading to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c), which may lead to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c), potentially leading to DoS or code execution via a crafted otf file.

FontForge version 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c), which may lead to DoS or code execution via a crafted otf file.

In the Debian tor_0.2.9.11-1~deb9u1 package, the debian/tor.init script was designed to execute aa-exec from the standard system pathname if the AppArmor package is installed, but this implementation is incorrect. This allows attackers to bypass intended AppArmor restrictions.