CVE Vulnerability Catalog

FreeRADIUS 2.x versions before 2.2.10 have an FR-GV-203 issue that leads to a memory leak in the decode_tlv() function and can cause denial of service.

The FR-GV-202 issue in FreeRADIUS 2.x before version 2.2.10 allows for a buffer overflow in the rad_coalesce() function. This can lead to a daemon crash or potentially allow remote attackers to execute arbitrary code.

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows 'Read / write overflow in make_secret()' and a denial of service.

The shoco_decompress function in the API in shoco through July 17, 2017, allows remote attackers to cause a denial of service via malformed compressed data, leading to buffer over-read and application crash.

EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, and EMC M&R for SAS Solution Packs contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with knowledge of the default password may use these accounts to run arbitrary web service and remote procedure calls on the affected system.

EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products allow an application administrator to upload arbitrary files that may contain malicious code. Such a file could then be executed on the affected system with the privileges of the user the application is running under.

The try_read_command function in memcached before version 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read.

Apache OpenMeetings version 1.0.0 updates user passwords in an insecure manner, potentially allowing unauthorized access.

Apache OpenMeetings version 1.0.0 does not check the contents of uploaded files. An attacker can cause a denial of service by uploading multiple large files to the server.

Apache OpenMeetings version 1.0.0 discloses Tomcat version and detailed error stack trace, which is not secure.

Apache OpenMeetings version 3.2.0 is vulnerable to parameter manipulation attacks, allowing an attacker to access restricted areas.

Apache OpenMeetings version 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.

Apache OpenMeetings version 1.0.0 has an overly permissive crossdomain.xml file, allowing Flash content to be loaded from untrusted domains.

Apache OpenMeetings version 1.0.0 uses weak cryptographic storage mechanisms. Additionally, the lack of captcha in registration and password reset forms, as well as missing brute force protection in authentication forms, increases the risk.

Apache OpenMeetings version 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to execute shell commands and elevate privileges.

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization or crash and restart upon receipt of an invalid IPv6 UDP packet. This can lead to DHCP service interruption, resulting in denial of service.