CVE Vulnerability Catalog

MISP versions up to 2.4.133 allows SSRF (Server-Side Request Forgery) in the REST client via the use_full_path parameter with an arbitrary URL.

SSRF vulnerability in osTicket before version 1.14.3 allows an attacker to add a malicious file to the server or perform port scanning.

In Snap7 server version 1.4.1, a vulnerability allows an attacker to send a crafted packet with the COTP protocol where the last-data-unit flag is set to No and the S7 writes a var function, causing the Snap7 server to crash.

Vulnerability in Firefox related to the EC scalar point multiplication algorithm (wNAF) that leaks partial information about the nonce used during signature generation. Based on electromagnetic traces, the private key could be computed.

Multiple stored XSS vulnerabilities exist in the YOURLS Admin Panel, versions 1.5-1.7.10. An authenticated user can inject malicious code by modifying a PHP plugin and uploading it.

An SSRF vulnerability in the downloadimage interface of CRMEB 3.0 allows remote attackers to download arbitrary files from the server and execute arbitrary code remotely.

A vulnerability in the TLS handler of Cisco ASA and FTD Software for Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The issue is due to improper implementation of countermeasures against the Bleichenbacher attack for RSA-based cipher suites. An attacker could send crafted TLS messages, enabling a chosen-ciphertext attack and potential decryption of previously captured TLS sessions.

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.

A vulnerability in the web services interface of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked. The issue is due to insufficient URL validation when portal access rules are configured. An attacker could exploit this by accessing certain URLs on the device.

A vulnerability in the ingress packet processing path of Cisco FTD Software for interfaces configured as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS). The issue is due to insufficient validation when processing Ethernet frames. An attacker could exploit this by sending malicious Ethernet frames. Consequences may include filling the /ngfw partition, preventing login and boot, or causing a process crash leading to reload.

A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. It is due to a memory leak when closing SSL/TLS connections in a specific state. An attacker could exploit this by establishing several SSL/TLS sessions and ensuring they are closed under certain conditions.