CVE Vulnerability Catalog

AMD fglrx-driver before version 15.9 allows local users to gain privileges via a symlink attack. This vulnerability exists due to an incomplete fix for CVE-2015-7723.

AMD fglrx driver before version 15.7 allows local users to gain privileges via a symlink attack.

An issue was discovered in Personify360 e-Business versions 7.5.2 through 7.6.1 that allows access to a list of database tables and their columns when creating a new role at the /TabId/275 URI.

An issue was discovered in Personify360 e-Business versions 7.5.2 through 7.6.1 that allows reading customer data such as name, master Customer Id, and email address by accessing the /TabId/275 URI. No authentication is required, enabling anyone to search for users in the system.

In Irssi before version 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. This may lead to application crashes.

In Irssi before version 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. This can lead to application crashes.

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file mishandled in the yr_re_fast_exec and _yr_scan_match_callback functions.

In Mercurial before version 4.1.3, the command 'hg serve --stdio' allows remote authenticated users to launch the Python debugger, consequently executing arbitrary code by using --debugger as a repository name.

PostgreSQL PL/Java versions after 9.0 do not honor access controls on large objects.

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH, making installations vulnerable to a range of MITM, downgrade, and decryption attacks.

SQL injection vulnerability in BigTree CMS version 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via create.php.

The error page mechanism of the Java Servlet Specification requires that the original request and response be forwarded to the error page. For static files, the expected behavior is to serve the content of the file as if processing a GET request, which was not implemented in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43, and 7.0.0 to 7.0.77.

In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.

In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.

In Resource Power Manager (RPM) in Android, there is a vulnerability related to improper access control that could potentially exist in all Android releases using the Linux kernel.

In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.

In the Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.