CVE Vulnerability Catalog

SAP Adaptive Server Enterprise (ASE) before version 15.7 SP132 and 16.0 before version 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism, enabling access to the probe account via a crafted response.

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, allowing remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

The oz_usb_handle_ep_data function in the OZWPAN driver in the Linux kernel through version 4.0.5 allows remote attackers to cause a denial of service via a crafted packet, leading to a divide-by-zero error and system crash.

In the Linux kernel up to version 4.0.5, there is a vulnerability in the OZWPAN driver that does not ensure certain length values are sufficiently large. This allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted packet.

An integer signedness error in the oz_hcd_get_desc_cnf function in the OZWPAN driver in the Linux kernel through version 4.0.5 may allow remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet.

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data.

Apache Tomcat versions 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 do not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body. This allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted zenworks-fileupload request.

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data.

Cisco Edge 300 software versions 1.0 and 1.1 on Edge 340 devices allow local users to obtain root privileges via unspecified commands.

Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors.

Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, allowing local users to obtain root privileges via crafted vpnagent options.

Xen versions 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, allowing local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.

SAP Afaria does not properly restrict access to unspecified functionality, allowing remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact.

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVE-2015-2282 involves a stack-based buffer overflow in the LZC decompression implementation in various SAP products, potentially leading to a denial of service or arbitrary code execution by attackers.

The Git plugin for FusionForge before version 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.

The installer in NetApp OnCommand Workflow Automation before version 2.2.1P1 and 3.x before version 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, allowing remote attackers to execute arbitrary code via unspecified vectors.

IBM PowerVC versions 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 do not require authentication for the ceilometer NoSQL database. This allows remote attackers to read or write to arbitrary database records, potentially gaining administrator privileges.