CVE Vulnerability Catalog

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and OnCell 5104-HSPA and 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and OnCell 5104-HSDPA, 5104-HSPA, and 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.

In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in the function `ofputil_pull_ofp15_group_mod` in `lib/ofp-util.c`.

In Open vSwitch (OvS) 2.6.1, there is a buffer over-read issue in the firewall implementation. This occurs while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp`, which can be triggered remotely.

In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in the `miniflow_extract` function, permitting remote bypass of the access control list enforced by the switch.

The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, allowing remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code.

Juju versions before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 use a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.

A use-after-free vulnerability was discovered in Contiki Operating System 3.0 in httpd-simple.c within the cc26xx-web-demo httpd. Upon a connection close event, the http_state structure was not properly deallocated, leading to a NULL pointer dereference in the output processing function, resulting in a board crash.

Picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.

Fortinet FortiPortal versions 4.0.0 and below have a weak password recovery vulnerability that allows an attacker to disclose information via the Forgotten Password feature.

Fortinet FortiPortal versions 4.0.0 and below have a password management vulnerability that allows an attacker to disclose information via the FortiAnalyzer Management View.

CVE-2017-7337 describes an improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below that allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'.

The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to memory corruption. This affects various versions of Windows and Exchange servers.

The Microsoft Malware Protection Engine, running on various versions of Windows and Microsoft Exchange Server, does not properly scan a specially crafted file leading to memory corruption.

Yodl before 3.07.01 has a buffer over-read vulnerability in the queue_push function in queue/queuepush.c.

Foreman since version 1.5 is vulnerable to an incorrect authorization check, allowing users with user management permissions assigned to certain organizations to perform all operations granted by these permissions on administrator user objects outside their scope.

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.