CVE Vulnerability Catalog

NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via error messages.

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

The vulnerability in Spring Security and Spring Framework involves incorrect recognition of URL paths, which may lead to certain resources not being protected. Differences in pattern matching mechanisms can result in unprotected paths that should be secured.

In Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter in authorization requests was processed as Spring SpEL. This allowed a malicious user to trigger remote code execution by crafting the value of the response_type parameter.

The password reset flow in UAA in Cloud Foundry and other mentioned versions is vulnerable to brute force attacks due to the ability to have multiple active codes at the same time. This vulnerability only applies when using the UAA internal user store for authentication.

It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.

In Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier, and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an email change for a user logged into a Cloud Foundry instance via a malicious link.

The Spring Framework versions from 4.0.0 to 4.0.4 and from 3.0.0 to 3.2.8, as well as possibly earlier unsupported versions, did not disable by default the resolution of URI references in a DTD declaration when processing user-provided XML documents. This enabled an XXE attack.

The ActiveDirectoryLdapAuthenticator in Spring Security versions 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds, it may incorrectly authenticate a user who supplies an empty password.

The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers, violating security assumptions regarding the evaluation difficulty of the Proof-of-Work function.

An issue was discovered in Oniguruma 6.2.0, used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation, which could lead to an invalid pointer dereference.

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution.

A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can lead to potential code execution.

A heap-based buffer overflow vulnerability exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow leading to a buffer overflow and potential code execution under the application's context.

A stack buffer overflow vulnerability exists in the ISO parsing functionality of PowerISO 6.8. A specially crafted ISO file can lead to potential code execution.

A heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution.

A heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution.

systemd-resolved version 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before version 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

In the Config-Model library before version 2.102, there is a vulnerability that allows local users to gain elevated privileges via a crafted model in the current working directory. The issue is related to the use of '.' in the INC array.