CVE Vulnerability Catalog

W kliencie Heimdal przed wersją 7.6.0 występuje problem z weryfikacją anonimowej wymiany kluczy PKINIT PA-PKINIT-KX, co umożliwia atak typu man-in-the-middle. Problem ten znajduje się w funkcji krb5_init_creds_step w pliku lib/krb5/init_creds_pw.c.

Zidentyfikowano podatność w panelach HMI SIMATIC Comfort oraz innych urządzeniach, które mogą być narażone na uzyskanie klucza sesji TLS przez atakującego z dostępem do sieci. Atakujący, obserwując ruch TLS, może odszyfrować komunikację między użytkownikiem a urządzeniem.

An issue was discovered in MISP before version 2.4.107 in app/webroot/js/misp.js, which has persistent XSS via image names in titles.

An issue was discovered in app/View/Elements/Events/View/value_field.ctp in MISP before 2.4.107, allowing persistent XSS via link type attributes with javascript:// links.

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.

The Ninja Forms plugin for WordPress before version 3.0.23 (when the Uploads add-on is activated) contains path traversal and unrestricted file upload vulnerabilities. This allows an attacker to traverse the file system to access files and execute code via the name and tmp_name parameters in includes/fields/upload.php.

A vulnerability in the DRBG (PRNG) used in Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling discovery of the private key of an affected device. The issue is due to insufficient entropy in the DRBG when generating cryptographic keys. An attacker could exploit this by generating many keys and looking for collisions with target devices.

A vulnerability in the SAML 2.0 SSO implementation for Clientless SSL VPN and AnyConnect Remote Access VPN in Cisco ASA and FTD could allow an unauthenticated, remote attacker to establish a VPN session. The issue is due to improper credential management when using NTLM or basic authentication. An attacker could open a VPN session after another user authenticates via SAML SSO, allowing connection to secured networks.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The issue is due to insufficient input validation. An attacker could exploit this by injecting commands into arguments for a specific command, allowing execution with root privileges.

A vulnerability in the MOBIKE feature for Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device, leading to a DoS condition. The issue is due to incorrect processing of certain MOBIKE packets. An attacker could send crafted MOBIKE packets to cause continuous memory consumption and eventual reload.

Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a DoS condition. For more information, see the Details section of the Cisco advisory.

A vulnerability in the internal packet-processing functionality of Cisco FTD Software for Firepower 2100 Series could allow an unauthenticated, remote attacker to cause the device to stop processing traffic, resulting in a DoS condition. The issue is due to a logic error that may prevent ingress buffers from being replenished under specific traffic conditions. An attacker could exploit this by sending a series of crafted packets, potentially exhausting all input buffers and causing a queue wedge in all active interfaces.

Multiple vulnerabilities in the WebVPN service of Cisco ASA and FTD Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the WebVPN portal. This is due to insufficient validation of user-supplied input. An attacker could persuade a user to click a crafted link, allowing arbitrary script execution in the interface context or access to sensitive browser information. Administrator privileges are required.

A vulnerability in the Lightweight Directory Access Protocol (LDAP) feature implementation in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The issue is due to improper parsing of LDAP packets. An attacker could send a crafted LDAP packet using Basic Encoding Rules (BER), causing the device to reload.

Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more details, see the Details section of the Cisco advisory.