CVE Vulnerability Catalog

The disas_insn function in QEMU before version 2.9.0 does not limit instruction size in TCG mode without hardware acceleration, allowing local users to gain privileges by creating a modified basic block that injects code into a setuid program.

Buffer overflow in PrivateTunnel versions 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.

W aplikacji Hyundai Motor America Blue Link w wersjach 3.9.5 i 3.9.4 odkryto problem związany z użyciem zakodowanego klucza kryptograficznego. Aplikacja wykorzystuje zakodowane hasło do deszyfrowania, aby chronić wrażliwe informacje użytkowników.

The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to gain arbitrary system privileges. This issue arises from .NET code for DCOM in these services.

On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0.

WIFICAM (P2P) devices have a private RSA key and 'Apple Production IOS Push Services' certificate stored in the firmware at /system/www/pem/ck.pem, allowing attackers to obtain sensitive information.

WIFICAM (P2P) devices use a cleartext UDP tunneling protocol for communication between an Android application and the camera, allowing remote attackers to obtain sensitive information by sniffing the network.

A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized creation, deletion, or modification of data.

A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, increasing the risk of unauthorized access to critical data.

A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, which can lead to unauthorized access to critical data.

A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires interaction from a person other than the attacker.

A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized creation, deletion, or modification of data.

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker.

IBM Domino versions 8.5.3 and 9.0 are vulnerable to a stack-based overflow in the IMAP service, which could allow an authenticated attacker to execute arbitrary code by specifying a large mailbox name.

IBM UrbanCode Deploy (UCD) versions 6.0, 6.1, and 6.2 are vulnerable to a denial of service due to an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or exhaust available memory resources.

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions.

A heap-based buffer overflow in the MACsec module in the Linux kernel through version 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature.

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, allowing remote authenticated users to execute arbitrary code with super-user privileges. This is exploited through the dm_bp_transition method and a user-created dm_procedure object.

An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.