CVE Vulnerability Catalog

The binary delta decoder in Mercurial before version 3.7.3 allows remote attackers to execute arbitrary code via (1) clone, (2) push, or (3) pull commands, related to (a) a list sizing rounding error and (b) short records.

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.

Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long header or URI that is matched against an improper regular expression.

F5 BIG-IP versions 11.3.x, 11.4.x before 11.4.1 build 685-HF10 and other listed components do not properly regenerate certificates and keys when deploying cloud images, allowing attackers to obtain them.

In Xymon 4.1.x, 4.2.x, and 4.3.x before version 4.3.25, xymond allows remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument.

In xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25, there is a vulnerability that allows remote attackers to read arbitrary files in the configuration directory via a 'config' command.

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2 allows local users to gain privileges by writing crafted data to a shared memory region, triggering memory corruption.

Xen versions 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize the x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state. This allows local guest domains to obtain sensitive information from other domains.

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

CVE-2016-2780 in Huawei UTPS before UTPS-V200R003B015D15SP00C983 has an untrusted search path vulnerability. This allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory.

A double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.

Integer overflow in the graphics drivers of Huawei Mate S smartphones before versions CRR-TL00C01B160SP01, CRR-UL00C00B160, and CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, leading to a heap-based buffer overflow.

A heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) allows local users to gain privileges via a Unicode file path in an IOCTL request.

Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission.

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before versions 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, allowing man-in-the-middle attackers to perform downgrade attacks and impersonate users by modifying the client-server data stream.

HPE Universal CMDB Foundation versions 10.0, 10.01, 10.10, 10.11, and 10.20 allow remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors.

Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors.

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.