CVE Vulnerability Catalog

The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (version 1.1.18 and earlier) uses a deprecated polkit authorization method that is subject to a race condition. This can lead to unauthorized access when the requesting process is replaced by another process with the same PID.

A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request.

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation.

Textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.

Faveo version 1.9.3 has a CSRF vulnerability in public/rolechangeadmin, allowing for the acquisition of admin privileges.

In vBulletin versions before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function.

MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.

The Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code.

Little Snitch versions 3.0 through 3.7.3 have a local privilege escalation vulnerability in the installer part. The issue is related to the installation of the configuration file 'at.obdev.littlesnitchd.plist', which gets installed to /Library/LaunchDaemons.

WebSocket.swift in Starscream before version 2.0.4 allows an SSL Pinning bypass due to incorrect management of the certValidated variable, which can be set to true but cannot be set to false.

GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors.

F5 SSL Intercept iApp versions 1.5.0 - 1.5.7 and SSL Orchestrator version 2.0 are vulnerable to a Server-Side Request Forgery (SSRF) attack when using the Dynamic Domain Bypass (DDB) feature and SNAT Auto Map option for egress traffic.

WebSocket.swift in Starscream before version 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function, which is too late; pinning should occur in the initStreamsWithData function.

HelpDEZk version 1.1.1 has a CSRF vulnerability in admin/home#/logos/, which can lead to remote execution of arbitrary PHP code.

HelpDEZk version 1.1.1 has a CSRF vulnerability in the path admin/home#/person/, allowing for the acquisition of admin privileges.

In Veritas System Recovery before version 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.

IBM Disposal and Governance Management and IBM Global Retention Policy and Schedule Management version 6.0.3 are vulnerable to cross-site request forgery, allowing an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

FreeRADIUS versions 2.2.x before 2.2.8 and 3.0.x before 3.0.9 do not properly check revocation of intermediate CA certificates.

Blue Coat Advanced Secure Gateway (ASG) version 6.6 before 6.6.5.4 and Content Analysis System (CAS) version 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.