CVE Vulnerability Catalog

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in the JPEG2000 parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in the TrueType Font (TTF) parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in the JPEG2000 parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.

Net Monitor for Employees Pro up to version 5.3.4 has an unquoted service path, allowing a Security Feature Bypass of its application blocking design goal. A local attacker with the right privileges can execute the blocked application program.exe.

Binaries compiled against targets using the libssp library in GCC for stack smashing protection may allow local users to perform buffer overflow attacks due to the lack of the Object Size Checking feature.

CVE-2015-8235 is a directory traversal vulnerability in Spiffy before version 5.4.

The chroot, jail, and zone connection plugins in Ansible before version 1.9.2 allow local users to escape a restricted environment via a symlink attack.

Race conditions exist in opa-fm before version 10.4.0.0.196 and opa-ff before version 10.4.0.0.197.

Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.

CVE-2017-9355 is an XXE vulnerability in the import playlist feature in Subsonic 6.1.1 that may allow remote attackers to conduct SSRF attacks via a crafted XSPF playlist file.

CVE-2017-7966 is a DLL Hijacking vulnerability in Schneider Electric's SoMachine HVAC v2.1.0 that allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to improper loading of a DLL.

A buffer overflow vulnerability exists in the AlTracePrint.exe executable in Schneider Electric's SoMachine HVAC v2.1.0.

The XHCI controller in VMware ESXi 6.5 and earlier versions has an issue with uninitialized memory usage. This may allow a guest to execute code on the host, posing a serious security risk.

VMware ESXi versions 6.5, 6.0 U3, 6.0 U2, 6.0 U1, and 5.5, as well as Workstation Pro / Player 12.x and Fusion Pro / Fusion 8.x prior to specified versions, have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host.

VMware ESXi 6.5 and 5.5, as well as Workstation Pro / Player 12.x and Fusion Pro / Fusion 8.x, have a Heap Buffer Overflow vulnerability in the SVGA driver. This issue may allow a guest to execute code on the host.

VMware Workstation Pro/Player 12.x before version 12.5.3 contains a DLL loading vulnerability due to the 'vmware-vmx' process loading DLLs from a path defined in the local environment variable. Successful exploitation of this issue may allow normal users to escalate privileges to System on the host machine where VMware Workstation is installed.

IBM Maximo Asset Management versions 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session.

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs due to inconsistency in the number of execute-never bits (one bit versus two bits).

CVE-2015-7888 describes a directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge that allows remote attackers to overwrite or create arbitrary files as the system-level user.