CVE Vulnerability Catalog

All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows writing to a PCIe register via a debugfs node, potentially leading to kernel memory corruption.

The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.

The knife bootstrap command in Chef Infra client before version 15.4.45 leaks the private RSA key validator.pem to /var/log/messages.

In FreeIPA before version 4.2.2, the ipa-kra-install script places the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

A cross-site request forgery (CSRF) vulnerability exists in Kallithea before version 0.2. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

In Open Ticket Request System (OTRS) versions 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

An out of bounds read in the function d2ulaw_array() in libsndfile version 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

An out of bounds read in the function d2alaw_array() in libsndfile version 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

Xiph.Org libvorbis version 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels is less than or equal to 0.

In sam2p version 0.49.3, there is an integer signedness error in the pcxLoadRaster function in in_pcx.cpp, leading to a heap-based buffer overflow.

In sam2p version 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation.

In sam2p version 0.49.3, there is an integer signedness error in the in_xpm_reader function in in_xpm.cpp, leading to a crash when writing to an out-of-bounds array element.

In version 0.49.3 of sam2p, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.

ImageMagick version 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.

ImageMagick version 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.

ImageMagick version 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.

A vulnerability in the Cisco Unified Intelligence Center allows an unauthenticated, remote attacker to execute unwanted actions. The issue is due to a lack of cross-site request forgery (CSRF) protection.

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity.

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many large IP fragments for reassembly in a short duration.

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages.