CVE Vulnerability Catalog

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction and can lead to unauthorized access to critical data.

The HashiCorp Vagrant VMware Fusion plugin version 4.0.24 and earlier contains an insecure suid wrapper binary that allows a non-root user to obtain a root shell.

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the NX-OS System Manager from receiving keepalive messages when an affected device receives a high rate of login attempts.

Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software.

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection.

A vulnerability in the implementation of SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The issue is due to improper handling of SIP request messages by the device.

A vulnerability in the implementation of SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The issue is due to improper handling of SIP request messages by the device.

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console.

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.

In GNU Libextractor version 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.

In GNU Libextractor version 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.

The net/http library in Go before version 1.4.3 does not properly parse HTTP headers, allowing remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers.

The net/http library in Go before version 1.4.3 does not properly parse HTTP header keys, allowing remote attackers to conduct HTTP request smuggling attacks via a space instead of a hyphen.

There is an SQL injection vulnerability in the login form of GSI WiNPAT Portal versions 3.2.0.1001 through 3.6.1.0 that allows remote attackers to execute arbitrary SQL commands via the username field.

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter.

The function in charge of checking whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.

Puppet Enterprise versions 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent versions 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelist protection mechanism and execute arbitrary code on Puppet nodes via command validation issues.

A cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before version 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an add_user action to administrator/index.php.

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before version 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via various parameters in administrator/index.php.