CVE Vulnerability Catalog

FreeIPA version 4.4.0 allows remote attackers to request an arbitrary SAN name for services.

All versions of HPE Helion Openstack Glance have a vulnerability that allows deleted image IDs to be reassigned. This enables remote authenticated users to cause other users to boot into a modified image without notification.

ManageEngine Firewall Analyzer before version 8.0 does not restrict access permissions, potentially leading to unauthorized access to data.

Logstash versions 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allow remote attackers to read communications between Logstash Forwarder agent and Logstash server.

The res_query function in libresolv in glibc before version 2.25 has a vulnerability that allows remote attackers to cause a denial of service through a NULL pointer dereference, leading to process crashes.

Huawei Ascend P7 allows remote attackers to cause a denial of service by crashing the phone process.

Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.

Versions of kamailio before 4.2.0-2 have a vulnerability that allows local users to gain elevated privileges.

OpenDaylight defense4all version 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.

Internet Explorer versions 6-11 allow remote attackers to execute arbitrary code.

CVE-2012-5010 vulnerability affects various versions of ASA (Adaptive Security Appliance) software that are susceptible to attacks before specific patch versions. This particularly concerns versions 9.4.x, 9.2.x, 8.4.x, 8.2.x, 9.1.x, and 1.2.4.x for ACI devices.

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, allowing local users to read or write to restricted directories or execute restricted commands.

TeamSpeak Client 3.0.19 allows remote attackers to cause an application crash via a sequence of Unicode characters, leading to denial of service.

IBM API Connect version 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

IBM DB2 for Linux, UNIX and Windows versions 9.2, 10.1, 10.5, and 11.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code.

IBM DB2 for Linux, UNIX and Windows versions 9.2, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service.

IBM QRadar versions 7.2 and 7.3 do not require users to have strong passwords by default, making it easier for attackers to compromise user accounts.

In the web management interface of the Foscam C1 Indoor HD Camera running application firmware version 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary data into the 'msmtprc' configuration file, resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

In the web management interface of the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary data into the 'msmtprc' configuration file, resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can allow an attacker to inject arbitrary data into the 'msmtprc' configuration file, leading to command execution.