CVE Vulnerability Catalog

The fastfat.sys driver in kernel mode for Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 has a memory allocation issue. This allows physically proximate attackers to execute arbitrary code or cause a denial of service by connecting a crafted USB device.

A vulnerability in Microsoft .NET Framework allows remote attackers to gain privileges through unverified data during interaction with the ClickOnce installer. It affects versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2.

A use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.

The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.

Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 33.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code. These issues are related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Integer overflow in Adobe Flash Player before version 13.0.0.250 and 14.x and 15.x before version 15.0.0.189 on Windows and OS X and before version 11.2.202.411 on Linux, as well as in Adobe AIR before version 15.0.0.293, Adobe AIR SDK before version 15.0.0.302, and Adobe AIR SDK & Compiler before version 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Adobe Flash Player and Adobe AIR in specific versions have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.250 for Flash Player and before 15.0.0.293 for Adobe AIR.

Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.250 for Flash Player and before 15.0.0.293 for Adobe AIR.

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.php.

Juniper Junos versions before R11 in 11.4, before R9 in 12.1, and other listed versions are vulnerable to an attack that can lead to denial of service. Attackers can exploit specially crafted fragmented packets of CLNP, IPv4, or IPv6 to block the em driver and reset the FPC.

In Juniper Junos versions before R12, 12.1 before R10, and others listed, configuring a RADIUS accounting server may create an entry in /var/etc/pam_radius.conf, allowing remote attackers to bypass authentication.

Juniper Junos versions before R12-S4, D35, D30, D25, D10, R9, D70, R7, R4 before S3, D55, D30, R5, D20, D26, D30, D15, R3, and R1 are vulnerable to a remote attack that can cause a router protocol daemon crash via a crafted RSVP PATH message.

Juniper JunosE versions before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allow remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet sent to (1) the interface or (2) loopback IP address, triggering a processor exception in ip_RxData_8.

In Juniper Junos OS versions from 9.1 to 14.1 before specific updates, a vulnerability exists that allows remote attackers to cause a denial of service through crafted transitive attributes in a BGP UPDATE. This can lead to memory corruption and a crash and restart of the RDP routing process.

Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors.

Multiple SQL injection vulnerabilities in the search function in the JobControl (dmmjobcontrol) extension version 2.14.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via the (1) education, (2) region, or (3) sector fields.