CVE Vulnerability Catalog

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware allows low privileged attackers with network access to compromise Oracle Tuxedo. Attackers can gain unauthorized access to critical data and modify it.

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware allows unauthenticated attackers with network access via Jolt to compromise Oracle Tuxedo. Successful attacks can lead to unauthorized access to critical data.

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, there is an elevation of privilege vulnerability in the default configuration with QNet enabled that could allow an attacker to access local and remote files or take ownership of files on other QNX nodes.

The csnmp_read_table function in the SNMP plugin in collectd before version 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash.

CouchDB administrative users can configure the database server via HTTP(S), allowing them to specify paths for operating system-level binaries. This enables the CouchDB user to execute arbitrary shell commands, including downloading and executing scripts from the public internet.

In Apache CouchDB before version 1.7.0 and 2.x before version 2.1.1, a vulnerability allows submitting _users documents with duplicate 'roles' keys, which can lead to non-admin users being granted admin privileges.

An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read used as a function pointer could lead to code execution in the kernel. This issue is rated as high because it could allow a local malicious application to execute arbitrary code within the context of a privileged process.

An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking could allow a read from an arbitrary kernel address. This issue is rated as moderate.

CVE-2017-6274 describes an elevation of Privilege vulnerability in the thermal driver, where missing bounds checks can lead to an out-of-bounds write in the kernel. This issue is rated as moderate.

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) version 8.1 could allow a remote attacker to perform a privilege escalation.

IBM Security Access Manager Appliance version 9.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

IBM Security Access Manager Appliance version 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands.

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require strong passwords by default, making it easier for attackers to compromise user accounts.

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

The Process function in HttpServer.cs in Ulterius before version 1.9.5.0 allows HTTP server directory traversal.

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. This vulnerability may allow remote code execution with high privileges.

A DLL Hijacking vulnerability has been identified in AutomationDirect CLICK Programming Software and other mentioned applications. An attacker could exploit this vulnerability by renaming a malicious DLL, allowing malicious code to run at the application's privilege level.

In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, allowing remote attackers to cause a denial of service via a crafted Smacker stream.

GrootFS versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. An attacker could provide an image layer that GrootFS would consider to be the Ubuntu base layer.