CVE Vulnerability Catalog

The Qpid server on Red Hat Satellite 6 does not properly restrict message types, allowing remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.

An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) related to a buffer overflow in the Server service (nsrd). A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary code on vulnerable installations of the software or cause a denial of service, depending on the target system's platform.

Netty versions before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5, as well as Play Framework 2.x before 2.3.9 may allow remote attackers to bypass the httpOnly flag on cookies, enabling the retrieval of sensitive information due to improper validation of cookie name and value characters.

The org.keycloak.services.resources.SocialResource.callback method in JBoss KeyCloak before version 1.0.3.Final allows remote attackers to conduct cross-site request forgery (CSRF) attacks due to lack of CSRF protection.

In Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5, a vulnerability allows attackers to cause a denial of service through NULL pointer dereference or out-of-bounds write related to binder passed lengths.

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.

An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging.

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.

An integer overflow was discovered in pdf_read_new_xref_section in Artifex MuPDF 1.11.

In PHPSUGAR PHP Melody before version 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.

In PHPSUGAR PHP Melody before version 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.

In Redmine before 3.2.6 and 3.3.x before 3.3.3, there is a lack of a check for whether the Repository module is enabled in a project's settings. This may allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.

An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.

In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery, potentially allowing an attacker to execute unauthorized code and change the device's configuration.