CVE Vulnerability Catalog

In Apache Batik before version 1.9, there is a vulnerability that allows files on the server's filesystem to be revealed to users who send maliciously crafted SVG files. The types of files that can be exposed depend on the user context in which the application is running.

In Apache FOP before version 2.2, there is a vulnerability that allows files on the server's filesystem to be revealed to users sending maliciously crafted SVG files. The types of files that can be shown depend on the user context in which the exploitable application is running.

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application due to overflow in pointer arithmetic calculations.

IBM API Connect version 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. An attacker could exploit this vulnerability by crafting a malicious URL.

IBM Cognos TM1 versions 10.1 and 10.2 are vulnerable to a denial of service due to a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service.

Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding.

Apache Traffic Server versions 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

In Apache Tomcat versions 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame did not close streams associated with that connection waiting for a WINDOW_UPDATE, potentially leading to exhaustion of available processing threads.

A bug in the handling of pipelined requests in Apache Tomcat causes the request to be lost when send file processing of the previous request is completed. This can lead to responses being sent for the wrong requests.

In Asterisk Open Source versions 11.x before 11.23.1 and 13.x before 13.11.1, as well as Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3, there is a vulnerability in the chain_sip module that allows remote attackers to cause a denial of service (port exhaustion).

The vulnerability in the mm subsystem of the Linux kernel up to version 3.2 allows local users to read or write to kernel memory locations in the first megabyte, bypassing the CONFIG_STRICT_DEVMEM protection mechanism.

Version 0.13 of the Artifex jbig2dec library has a heap-based buffer over-read vulnerability that can lead to application crashes or disclosure of sensitive information from process memory. The issue occurs in the jbig2_decode_symbol_dict function while processing a crafted .jb2 file.

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, allowing remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header.

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.

CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.

CVE-2017-7717 is an SQL injection vulnerability in the getUserUddiElements method of the ES UDDI component in SAP NetWeaver AS Java 7.4. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

SAP AS JAVA SSO Authentication Library versions 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width and height parameters to otp_logon_ui_resources/qr.

Proxifier for Mac before version 2.19.2 allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

pmmasterd in Quest Privilege Manager before version 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files, leading to arbitrary code execution with root privileges via an ACT_NEWFILESENT action.