CVE Vulnerability Catalog

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

Rogue Wave JViews before version 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath. The issue exists because the ilog.views.faces.IlvFacesController servlet does not require explicit configuration of servlets that can be called.

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, known as a 'CPI code injection vulnerability.'

The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (version 1.1.18 and earlier) uses a deprecated polkit authorization method that is subject to a race condition. This can lead to unauthorized access when the requesting process is replaced by another process with the same PID.

A vulnerability in Cisco Aironet 1830 and 1850 Series Access Points running Cisco Mobility Express Software allows an unauthenticated remote attacker to take complete control of an affected device. The issue is due to the existence of default credentials available regardless of the device's configuration.

A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request.

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation.

Textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.

Faveo version 1.9.3 has a CSRF vulnerability in public/rolechangeadmin, allowing for the acquisition of admin privileges.

In vBulletin versions before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url function.

MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.

The Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code.

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data/configurations directory. It leverages the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69.

Little Snitch versions 3.0 through 3.7.3 have a local privilege escalation vulnerability in the installer part. The issue is related to the installation of the configuration file 'at.obdev.littlesnitchd.plist', which gets installed to /Library/LaunchDaemons.

WebSocket.swift in Starscream before version 2.0.4 allows an SSL Pinning bypass due to incorrect management of the certValidated variable, which can be set to true but cannot be set to false.

GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors.

F5 SSL Intercept iApp versions 1.5.0 - 1.5.7 and SSL Orchestrator version 2.0 are vulnerable to a Server-Side Request Forgery (SSRF) attack when using the Dynamic Domain Bypass (DDB) feature and SNAT Auto Map option for egress traffic.

WebSocket.swift in Starscream before version 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function, which is too late; pinning should occur in the initStreamsWithData function.