CVE Vulnerability Catalog

IBM WebSphere MQ versions 9.0.1 and 9.0.2 may incorrectly transmit user credentials in plain text.

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers to leak information from the interpreter.

In PHP versions before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the PEM sealing code in the openssl extension did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter.

In PHP versions before 5.6.31, there is a vulnerability related to an invalid free during the deserialization of boolean parameters in WDDX. Attackers can exploit this flaw by injecting XML for deserialization, potentially crashing the PHP interpreter.

In PHP versions before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a denial of service attack by injecting long form variables, leading to excessive CPU consumption.

In PHP versions before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be exploited by attackers to bypass hostname-specific URL checks.

EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.

In ncurses 6.0, a NULL pointer dereference was found in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library processes untrusted terminfo data.

In ncurses 6.0, an attempted access to address 0xffffffffffffffff was found in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library processes untrusted terminfo data.

In version 2.14rc0 of Netwide Assembler (NASM), a vulnerability in preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file.

Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file.

tcpdump version 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node, which can trick other nodes in the cluster.

The ReadOneJNGImage function in GraphicsMagick 1.3.26 allows remote attackers to cause an application crash during JNG reading via a zero-length color_image data structure.

SWFTools version 0.9.2, when processing a crafted file in swfcombine, can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c.

CVE-2017-11100 affects SWFTools version 0.9.2, where processing a crafted file in the swfextract tool can lead to a NULL Pointer Dereference in the swf_FoldSprite() function.

A vulnerability in SWFTools 0.9.2 occurs when processing a crafted file in wav2swf, which can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c.

CVE-2017-11098 affects SWFTools version 0.9.2, where processing a crafted file in png2swf can lead to a Segmentation Violation in the png_load() function in lib/png.c.

SWFTools version 0.9.2, when processing a crafted file in swfc, can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.