CVE Vulnerability Catalog

An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions related to memory corruption. Successful exploitation could lead to arbitrary code execution.

A memory corruption vulnerability was discovered in Adobe Shockwave 12.2.9.199 and earlier. Successful exploitation could lead to arbitrary code execution.

A memory corruption vulnerability exists in Adobe Acrobat and Reader that could be exploited to execute arbitrary code. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

A Server-Side Request Forgery (SSRF) vulnerability was discovered in Adobe Connect 9.6.2 and earlier versions, which could be abused to bypass network access controls.

A use after free vulnerability was discovered in Adobe Flash Player 27.0.0.183 and earlier versions in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access, potentially leading to code corruption, control-flow hijack, or an information leak attack.

A use after free vulnerability was discovered in Adobe Flash Player 27.0.0.183 and earlier versions in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access, potentially leading to code corruption, control-flow hijack, or an information leak attack.

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions related to an integer overflow that leads to reading data past the end of the target buffer. The use of an invalid pointer during access to internal data structure fields causes this vulnerability.

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVE-2017-10906 describes an escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40. This may allow an attacker to change the terminal UI or execute arbitrary commands on the device.

K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with code 0x95002574.

K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows NULL pointer dereference via a DeviceIoControl request with code 0x95002570.

In Mercurial before version 4.4.1, a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script. Typical use of Mercurial prevents the construction of such repositories, but they can be created programmatically.

Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands via the web interface.

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.

Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded.

A remote code execution vulnerability exists in the Android system (bluetooth). This affects versions 7.0, 7.1.1, 7.1.2, and 8.0.

CVE-2017-13150 is an information disclosure vulnerability in the Android media framework. It affects versions 7.0, 7.1.1, 7.1.2, and 8.0 of the Android system.

CVE-2017-13149 is an information disclosure vulnerability in the Android media framework. It affects versions 7.0, 7.1.1, 7.1.2, and 8.0 of the Android system.

CVE-2017-0879 is an information disclosure vulnerability in the Android media framework. It affects versions 7.0, 7.1.1, 7.1.2, and 8.0 of Android.