CVE Vulnerability Catalog

Fusiondirectory 1.3 suffers from improper session handling. This could allow an attacker to hijack user sessions or bypass authentication mechanisms.

Motyw Betheme dla WordPressa jest podatny na wstrzykiwanie obiektów PHP w wersjach do 26.5.1.4 włącznie, poprzez deserializację niezaufanych danych wejściowych dostarczanych przez parametry import, mfn-items-import-page oraz mfn-items-import. Umożliwia to uwierzytelnionym atakującym z uprawnieniami na poziomie subskrybenta i wyżej wstrzyknięcie obiektu PHP.

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

Wtyczka Permalink Manager Lite dla WordPressa jest podatna na atak typu Cross-Site Request Forgery w wersjach do 2.2.20.1 włącznie. Problem wynika z braku lub nieprawidłowej walidacji nonce w funkcji extra_actions, co umożliwia nieautoryzowanym atakującym zmianę ustawień wtyczki, w tym permalinków i map witryn.

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modify logs.

The class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD versions up to 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. It is one of several implementations that can be used for loading the host keys of an SSH server.

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This is due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. An attacker could exploit this by sending crafted SIP traffic, leading to a denial of service (DoS) condition.

A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This is due to improper restriction of access to HTTPS endpoints. An attacker could exploit this by sending specific messages to the HTTPS handler, allowing configuration changes that should only be performed through Firepower Management Center (FMC).

A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a device reload, resulting in a denial of service (DoS). This is due to improper processing of HostScan data from the Posture module. An attacker could exploit this by sending crafted HostScan data.

A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). This is due to a memory handling error when GRE traffic is processed. An attacker could exploit this by sending a crafted GRE payload, causing a device restart.

Multiple vulnerabilities in the SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition. This is due to improper management of system resources when processing SMB2 traffic. An attacker could send a high rate of SMB2 packets to trigger a reload of the Snort process. With preserve-connection enabled (default), policy bypass and malicious payload delivery are also possible.

A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This is due to improper implementation of countermeasures against a Bleichenbacher attack on devices using SSL decryption policies. An attacker could exploit this by sending crafted TLS messages, potentially allowing decryption of previously captured TLS sessions.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This is due to improper input validation for specific CLI commands. An attacker could inject operating system commands into a legitimate command, escaping the restricted prompt and executing arbitrary commands.

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This is due to a flaw in authorization verifications during the VPN authentication flow. An attacker with valid credentials could send a crafted packet during authentication, gaining access with another user's privileges.

A vulnerability in the SSL/TLS client of Cisco ASA and FTD Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this by ensuring the device connects to an SSL/TLS server using specific encryption parameters.

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS). This is due to insufficient input validation. An attacker could exploit this by sending a crafted SNMP request, causing a device reload.

Multiple vulnerabilities in the SMB2 processor of the Snort detection engine on various Cisco products could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition on an affected device.

A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). This is due to improper error handling when an SSH session fails. An attacker could exploit this by sending a high rate of crafted SSH connections, leading to resource exhaustion and reboot.

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series running ASA or FTD Software could allow an unauthenticated attacker with physical access to bypass secure boot functionality. This is due to a logic error in the boot process. An attacker could inject malicious code into a specific memory location during boot, allowing persistent code execution and breaking the chain of trust.