CVE Vulnerability Catalog

The print_insn_score32 function in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted binary file, as demonstrated by mishandling of this file during 'objdump -D' execution.

The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted binary file.

XXE (XML External Entity) vulnerability in Citrix XenMobile Server 9.x and 10.x before version 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

Kibana versions prior to 5.2.1 configured for SSL client access do not clean up file descriptors after certain requests, leading to accumulation over time until the process crashes.

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests, potentially allowing users without access to a document and/or field to access this information.

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, are vulnerable to denial of service attacks. A remote attacker can exploit crafted Netflow v5, Netflow v9, or IPFIX packets, causing the Logstash process to crash.

Logstash versions prior to 2.1.2 are vulnerable to attacks via engineered input that can create malicious formulas in CSV data.

In Logstash versions prior to 2.3.4, the Elasticsearch Output plugin would log HTTP authorization headers to file, which could contain sensitive information.

Kibana versions before 4.5.4 and 4.1.11, when a custom output is configured for logging, may write cookies and authorization headers to log files. This information could be used to hijack sessions of other users using Kibana behind some form of authentication such as Shield.

The Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF attack that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page.

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

In the package_ipk.bbclass in Poky version poky-pyro 17.0.0 for the Yocto Project, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.

In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.

In the default installation of APCUPSD up to version 3.14.14, a local authenticated but unprivileged user can run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup.

A vulnerability in Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program.

A vulnerability in Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server. Exploitation of this vulnerability requires a specially crafted application.

QNAP QTS before version 4.2.6 build 20170517 has a flaw in the change password function.

On D-Link DIR-605L devices, firmware before version 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

In version 2.3.0 of SimpleCE, a CSRF vulnerability can be exploited to add an administrator account or change its settings, including the password.