CVE Vulnerability Catalog

On Juniper Networks SRX Series Services Gateways running Junos OS 12.1X46 prior to 12.1X46-D65 and 12.3X48 prior to 12.3X48-D40 and 12.3X48 prior to 12.3X48-D60, the flowd daemon on the primary node may crash and restart when attempting to synchronize a multicast session created via crafted multicast packets.

Apache Hive (JDBC + HiveServer2) before version 1.2.2 and 2.0.x before 2.0.1 does not verify the common name attribute of the certificate during SSL connection setup. This allows a certificate issued for a different domain to be accepted, potentially leading to man-in-the-middle attacks.

The libmpgatofixed32_plugin.dll plugin in VideoLAN VLC media player version 2.2.4 allows remote attackers to cause application crashes or denial of service via a crafted file.

The libflac_plugin.dll in VideoLAN VLC media player version 2.2.4 allows remote attackers to cause a denial of service through heap corruption and application crash by using a crafted FLAC file.

The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote authenticated administrators via the virtuemart_paymentmethod_id or virtuemart_shipmentmethod_id parameter to administrator/index.php.

e107 version 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and other versions. The application does not sufficiently verify if a request was intentionally provided by the user, which could allow an attacker to modify the device's configuration.

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in the `miniflow_extract` function, permitting remote bypass of the access control list enforced by the switch.

The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, allowing remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code.

A use-after-free vulnerability was discovered in Contiki Operating System 3.0 in httpd-simple.c within the cc26xx-web-demo httpd. Upon a connection close event, the http_state structure was not properly deallocated, leading to a NULL pointer dereference in the output processing function, resulting in a board crash.

Fortinet FortiPortal versions 4.0.0 and below have a weak password recovery vulnerability that allows an attacker to disclose information via the Forgotten Password feature.

Fortinet FortiPortal versions 4.0.0 and below have a password management vulnerability that allows an attacker to disclose information via the FortiAnalyzer Management View.

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'.

The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to memory corruption. This affects various versions of Windows and Exchange servers.

The Microsoft Malware Protection Engine, running on various versions of Windows and Microsoft Exchange Server, does not properly scan a specially crafted file leading to memory corruption.

Foreman since version 1.5 is vulnerable to an incorrect authorization check, allowing users with user management permissions assigned to certain organizations to perform all operations granted by these permissions on administrator user objects outside their scope.

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.

CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack user authentication for requests to start an update from an arbitrary source via a crafted request.