CVE Vulnerability Catalog

IBM Cognos TM1 versions 10.1 and 10.2 are vulnerable to a denial of service due to a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service.

Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding.

Apache Traffic Server versions 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

In Apache Tomcat versions 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, a regression in send file processing was introduced. If the send file processing completed quickly, it was possible for the same Processor to be added to the processor cache twice.

In Apache Tomcat versions 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame did not close streams associated with that connection waiting for a WINDOW_UPDATE, potentially leading to exhaustion of available processing threads.

In Apache Tomcat versions from 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75, there was an issue with the use of the incorrect facade object in some calls to application listeners. This allowed untrusted applications to retain a reference to the request or response object, potentially accessing or modifying information associated with another web application.

A bug in the handling of pipelined requests in Apache Tomcat causes the request to be lost when send file processing of the previous request is completed. This can lead to responses being sent for the wrong requests.

In Asterisk Open Source versions 11.x before 11.23.1 and 13.x before 13.11.1, as well as Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3, there is a vulnerability in the chain_sip module that allows remote attackers to cause a denial of service (port exhaustion).

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.

The vulnerability in the mm subsystem of the Linux kernel up to version 3.2 allows local users to read or write to kernel memory locations in the first megabyte, bypassing the CONFIG_STRICT_DEVMEM protection mechanism.

Version 0.13 of the Artifex jbig2dec library has a heap-based buffer over-read vulnerability that can lead to application crashes or disclosure of sensitive information from process memory. The issue occurs in the jbig2_decode_symbol_dict function while processing a crafted .jb2 file.

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

LibreOffice before March 14, 2017, has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.

BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, allowing remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header.

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.

In wallpaper.c in feh before v2.18.3, a malicious client pretending to be the E17 window manager can trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

CVE-2017-7717 is an SQL injection vulnerability in the getUserUddiElements method of the ES UDDI component in SAP NetWeaver AS Java 7.4. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.