CVE Vulnerability Catalog

The NTLM authentication feature in curl and libcurl before version 7.57.0 on 32-bit platforms allows attackers to cause a denial of service through integer overflow and resultant buffer overflow, leading to application crash.

EMC RSA Authentication Agent API version 8.5 for C and RSA Authentication Agent SDK version 8.6 for C allow attackers to bypass authentication, known as an 'Error Handling Vulnerability.'

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass.

An issue was discovered in certain Apple products, including macOS High Sierra before Security Update 2017-001, related to the 'Directory Utility' component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.

The WooCommerce plugin for WordPress through version 3.x has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which allows access to a parent directory.

The init_new_context function in the Linux kernel before version 4.12.10 does not correctly handle errors related to LDT table allocation when forking a new process. This allows a local attacker to achieve a use-after-free state or possibly have unspecified other impact by running a specially crafted program.

The mm_init function in the Linux kernel before version 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.

The vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.

The vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

In YARD versions before 0.9.11, the lib/yard/core_ext/file.rb does not block relative paths starting with the ../ sequence, allowing attackers to conduct directory traversal attacks and read arbitrary files.

A customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time-limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised.

The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page.

A buffer overflow vulnerability was discovered in EMC ScaleIO 2.0.1.x in the SDBG service, which may allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.

An issue was discovered in EMC ScaleIO 2.0.1.x related to message parsers (MDM, SDS, and LIA) that could allow an unauthenticated remote attacker to send specially crafted packets. This could lead to stopping ScaleIO services and causing a denial of service situation.

An issue was discovered in EMC ScaleIO 2.0.1.x where one of the support scripts saves the credentials of the MDM user in clear text in temporary log files. These files may be read by an unprivileged user with access to the server where the script was executed.

A CSRF issue exists in the Business Analytics application in Hitachi Vantara Pentaho BA Platform through version 8.0.

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

Use-after-free vulnerability in Samba 4.x before version 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

TeamPass versions before 2.1.27.9 do not properly enforce item access control in items.queries.php. This allows an attacker to copy arbitrary items, edit them in read-only directories, delete items, and access the history and attributes of directories.