CVE Vulnerability Catalog

Apache OpenMeetings version 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization or crash and restart upon receipt of an invalid IPv6 UDP packet. This can lead to DHCP service interruption, resulting in denial of service.

An internal Junos OS sockets library is vulnerable to a buffer overflow, which may lead to a denial of service (kernel panic) or privilege escalation through local code execution. The routines are only accessible via programs running on the device.

The MACsec feature on Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link cannot be established, falling back to an unencrypted link.

There is an insufficient authentication vulnerability on platforms where Junos OS instances run in a virtualized environment, potentially allowing unprivileged users to access the host operating environment and escalate privileges.

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.

Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. An attacker can repeatedly crash the rpd process, causing prolonged denial of service.

CVE-2017-2272 describes an untrusted search path vulnerability in self-extracting encrypted files created by AttacheCase version 3.2.2.6 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2271 describes an untrusted search path vulnerability in self-extracting encrypted files created by AttacheCase version 2.8.3.0 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.

The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.