CVE Vulnerability Catalog

The NetworkInterface::getHost function in ntopng before version 3.0 allows remote attackers to cause an application crash via a NULL pointer dereference when a field that should contain a hostname or IP address is empty.

The Symantec Messaging Gateway can encounter an issue of remote code execution, allowing commands to be executed remotely on a target machine or in a target process.

The Symantec Messaging Gateway can process a corrupted Word file with potentially malicious macros despite the administrator having the 'disarm' functionality enabled. This constitutes a bypass of the application's disarm functionality.

The grub_memmove function in radare2 1.5.0 allows remote attackers to cause a denial of service via a crafted binary file, potentially leading to application crashes due to a buffer underflow.

In FortiClientWindows versions 5.4.1 and 5.4.2, there is a vulnerability that allows an attacker to escalate privileges via a FortiClientNamedPipe flaw.

The Automatic Bug Reporting Tool (ABRT) allows local users to read, change ownership, or have other unspecified impacts on arbitrary files via a symlink attack on certain system files.

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.

A stack buffer overflow vulnerability has been discovered in Microsoft Skype versions 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.

fedora-arm-installer up to version 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function, which could lead to various damages. A crafted TIFF document can lead to out-of-bounds read, invalid free, or memory corruption, potentially allowing arbitrary code execution.

Cognito Software Moneyworks versions 8.0.3 and earlier have a password exposure issue. Verbose logging writes the administrator password to a world-readable file.

The TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp.

Ntopng versions before 3.0 allow HTTP Response Splitting.

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software versions 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition.

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for ARF files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file and convincing them to launch it, potentially leading to application crashes or arbitrary code execution.

A vulnerability in the web-based user interface of Cisco Prime Infrastructure and Evolved Programmable Network Manager allows an authenticated, remote attacker to access information in the system and perform remote code execution. The attacker must have valid user credentials.

The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

Dolibarr ERP/CRM version 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.

CVE-2017-9848 is a SQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0. It allows remote attackers to execute arbitrary SQL commands via a crafted ArticleIDs element within an XML document in a GetArticleHitsArray element.