CVE Vulnerability Catalog

An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

An issue was discovered in certain Apple products, including iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1, involving the 'WebKit Web Inspector' component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products, including iOS before 10.3.2, related to the 'Security' component. It allows attackers to bypass intended access restrictions via an untrusted certificate.

An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.

An issue was discovered in macOS versions prior to 10.12.5 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

A vulnerability in the TCP throttling process for the GUI of Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to insufficient TCP rate limiting protection on the GUI.

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software versions 7.1 through 7.3 on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments.

A vulnerability in the CLI of Cisco NX-OS System Software versions 7.1 through 7.3 on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The issue is due to insufficient input validation of command arguments.

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service (DoS) condition. The issue is due to a lack of rate-limiting functionality in the TCP Listen application.

A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the Device Manager web interface.

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate-limiting protection.

A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software versions 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources.

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router, one can bypass intended access restrictions by sending shell commands and reading their results or by changing the router's username and password.

Ceragon FibeAir IP-10 wireless radios through version 7.2.0 have a default password 'mateidu' for a hidden user account. This account can be accessed via both the web interface and SSH, with SSH providing an attacker access to a Linux shell.

An issue was discovered on Mimosa Client Radios before version 2.2.3 that allows an attacker to download files from the device's filesystem as the root user via an unsanitized GET parameter in the web interface. This can lead to exposure of administrator passwords and pre-shared keys for wireless connections.

An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.

An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.

An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.

A hard-coded credentials issue was discovered on Mimosa Client Radios, Mimosa Backhaul Radios, and Mimosa Access Points before version 2.2.3. An attacker can use these hard-coded credentials to connect to the Mosquitto broker, allowing them to view messages sent between devices.