CVE Vulnerability Catalog

A vulnerability in the OAMP credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to gain elevated privileges. The issue is due to a lack of proper input validation.

In the ldap.v2 package (also known as go-ldap) up to version 2.5.0 for Go, an attacker may be able to log in with an empty password. This issue affects an application using this package if certain conditions regarding user authorization are met.

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files.

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. A login attempt in the XML-RPC interface with an XML message containing an empty member element causes wgagent to crash, logging out any user with an open session in the UI.

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new feature added in version 3.0.0 results in potential information disclosure by sending text as an unencrypted DNS query.

Bareos version 16.2.6 and earlier creates a PID file after dropping privileges to a non-root account, which may allow local users to kill arbitrary processes by modifying this file before a root script executes a 'kill `cat /pathname`' command.

The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account. This might allow local users to kill arbitrary processes by modifying this PID file before a root script executes a 'kill' command.

In Joomla! before version 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.

A use-after-free vulnerability in Decoder.cpp in libpgf before version 6.15.32 may lead to unauthorized memory access.

CVE-2015-5395 is a cross-site request forgery (CSRF) vulnerability in SOGo before version 3.1.0. An attacker can exploit this vulnerability to perform unauthorized actions on behalf of the user.

The use-after-free vulnerability in Open Litespeed before version 1.3.10 may allow unauthorized access to memory, potentially leading to unexpected application behavior.

IBM Security SiteProtector System versions 3.0, 3.1, and 3.1.1 allows local users to gain elevated privileges.

In Apache Struts versions 2.3.7 through 2.3.33 and 2.5 through 2.5.12, it is possible to prepare a special URL that can overload the server process during URL validation in a form. This issue exists due to an incomplete fix for S2-047 / CVE-2017-7672.

The REST Plugin in Apache Struts versions 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable. This allows for a DoS attack using malicious requests with specially crafted XML payload.

In LibRaw through version 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

In Apache Struts versions 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a remote code execution (RCE) attack.

The Convention plugin in Apache Struts versions 2.3.x before 2.3.31 and 2.5.x before 2.5.5 allows for the preparation of a special URL that can be used for path traversal and execution of arbitrary code on the server side.

Kod obsługi BL1 FWU SMC w ARM Trusted Firmware przed wersją 1.4 może pozwolić atakującym na zapis dowolnych danych do pamięci zabezpieczonej, omijając mechanizm ochrony bl1_plat_mem_check. Może to prowadzić do odmowy usługi lub innych nieokreślonych skutków poprzez spreparowany obraz AArch32, który wywołuje przepełnienie całkowite.

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers (models 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD). A remote, unauthenticated attacker could send a specially crafted PCCC packet to the controller that could potentially cause the controller to enter a DoS condition.