CVE Vulnerability Catalog

A CSRF vulnerability has been identified in the OpenId Connect client registration service in Apache CXF Fediz prior to versions 1.4.0 and 1.3.2. A malicious web application could create new clients or reset secrets after an admin user has logged into the client registration service.

A CSRF vulnerability has been found in the Spring 2, Spring 3, Jetty 8, and Jetty 9 plugins in Apache CXF Fediz prior to versions 1.4.0, 1.3.2, and 1.2.4. This flaw may allow attackers to perform unauthorized actions on behalf of users.

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF.

CVE-2017-6657 concerns the mishandling of Ether Type Validation in Cisco Sourcefire Snort 3.0 before build 233. This allows for the crafting of packets with IP protocol numbers in the ether type field, potentially leading to a crash of the Snort++ decoder.

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information about scheduled customer meetings. The issue is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions.

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes. This page acts as a web shell, enabling command execution without client-side feedback from the web application.

A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability could lead to a buffer overflow.

A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests.

A vulnerability in the Plug-and-Play (PnP) subsystem of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated attacker to execute arbitrary code with root privileges. The issue is due to insufficient validation of PnP server responses.

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to incomplete input validation for the size of a received ICMP packet.

A boundary error in the 'parse_tiff_ifd()' function in LibRaw versions before 0.18.2 can lead to memory corruption. Exploiting a specially crafted KDC file with the model set to 'DSLR-A100' and containing multiple sequences of 0x100 and 0x14A TAGs may allow an attack.

An error in the 'parse_tiff_ifd()' function in LibRaw versions before 0.18.2 can be exploited to corrupt memory.

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.

The Eir D1000 modem does not properly restrict the TR-064 protocol, allowing remote attackers to execute arbitrary commands via TCP port 7547. This is demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.

A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.

The TrustZone access control policy in Android may be bypassed due to improper input validation, potentially leading to a buffer overflow and buffer over-read vulnerabilities.

In QSEE in all Android releases from CAF, access control may potentially be bypassed due to a page alignment issue.

All Android releases from CAF using the Linux kernel may pass shared content protection memory as the secure camera memory buffer to a trusted application, leading to a misinterpretation of this memory as secure.

In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.

In TrustZone, an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.