CVE Vulnerability Catalog

In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack.

In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool. These issues can lead to corrupted double-linked lists, double free or corruption, and out-of-bounds writes.

In mpg123 version 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input can lead to a remote denial of service attack.

CVE-2017-10681 in Piwigo through 2.9.1 has a CSRF vulnerability that allows remote attackers to hijack user authentication for requests to unlock albums via a crafted request.

CVE-2017-10680 is a CSRF vulnerability in Piwigo through version 2.9.1 that allows remote attackers to hijack user authentication to change a private album to public via a crafted request.

Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed.

The CSRF vulnerability in Piwigo through version 2.9.1 allows remote attackers to hijack user authentication for requests to delete permalinks via a crafted request.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters into the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary shell characters during NTP server configuration, resulting in command injection.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary shell characters during manual network configuration, resulting in command injection.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary shell characters during manual network configuration, resulting in command injection.

In the web management interface of Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary shell characters during manual network configuration, resulting in command injection.

A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can allow an attacker to inject arbitrary shell characters during SMTP configuration tests, leading to command execution.

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the 'msmtprc' configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user.

Multiple JasperReports Server components contain vulnerabilities that may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information.

A vulnerability in Azure AD Connect related to password writeback, if misconfigured, allows an attacker to reset passwords and gain unauthorized access to privileged on-premises AD user accounts.

The DirectX component in Microsoft Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application.

The graphics component in Microsoft Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application.