CVE Vulnerability Catalog

Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. Additionally, the attacker can execute system commands remotely by abusing pre-backup events.

OpenMPT through version 1.26.12.00 and libopenmpt before version 0.2.8461-beta26 has a heap buffer overflow that may lead to arbitrary code execution. This issue is triggered by a crafted PSM file that causes the same sample slot to be used for two samples.

On all vSRX and SRX Series devices, when DHCP or DHCP relay is configured, specially crafted packets may cause the flowd process to crash, halting or interrupting traffic through the device. Repeated crashes of the flowd process may lead to an extended denial of service condition.

An XML injection vulnerability in Junos OS CLI allows a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing.

A buffer overflow vulnerability in the Junos OS CLI may allow a local authenticated user with read-only privileges to execute code with root privileges. This affects specific versions of Junos OS on various Juniper Networks devices.

A specific device configuration can lead to a situation where a user logs in without being prompted for a password. This issue occurs due to a failure in committing configuration changes, potentially allowing unauthorized access.

There is an out-of-bounds write vulnerability in the Linux system in the file drivers/char/lp.c. A missing bounds check allows an attacker with partial control over the 'secure boot' kernel command line to overflow the parport_nr array.

The re-key admin monitor was introduced in Jenkins 1.498, re-encrypting all secrets in JENKINS_HOME with a new key and creating a backup directory with old secrets and the key used for encryption. These backups were world-readable and not removed afterwards.

ONOS version 1.9.0 is vulnerable to unauthenticated upload of applications (.oar), leading to remote code execution.

ONOS version 1.9.0 allows unauthenticated use of websockets, which may lead to unauthorized access to the system.

ONOS version 1.9.0, developed by the Linux Foundation, is vulnerable to a DoS attack.

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function.

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.

Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value, potentially leading to modification of unexpected memory locations.

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.

CVE-2017-1000069 describes a CSRF vulnerability in oauth2_proxy version 2.1 that can occur during the authentication flow.

TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature, allowing the disabling of arbitrary running splits and causing denial of service to clients.

MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method, allowing authenticated users to access the database and possibly escalate privileges.

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information.