CVE Vulnerability Catalog

An exploitable uninitialized variable vulnerability leading to a stack-based buffer overflow exists in Iceni Argus. The issue occurs when converting a malformed PDF to XML, allowing an attacker to write outside the bounds of a stack buffer.

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

The Siemens web application RUGGEDCOM NMS version below 1.2 on ports 8080/TCP and 8081/TCP is vulnerable to a Cross-Site Request Forgery (CSRF) attack. An attacker could perform administrative operations if the targeted user has an active session and is induced to trigger a malicious request.

An integer overflow at an unserialize_uep memory allocation site occurs for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

The web interface on Dahua DHI-HCVR7216A-S3 devices with specified firmware versions allows remote attackers to gain login access by leveraging knowledge of the MD5 Admin Hash without knowing the corresponding password.

An issue exists on Dahua DHI-HCVR7216A-S3 devices with specific firmware versions where SmartPSS automatically logs in as admin on the login screen. This allows sniffing sensitive information without prior knowledge of the password.

The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.

The Zip::File component in the rubyzip gem before version 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

Side-channel attacks on MMU operations in modern ARM processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.

A side-channel attack on MMU operations in modern AMD processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.

A side-channel attack on MMU operations in modern Intel processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.

JustSystems Ichitaro 2016 Trial contains a vulnerability that occurs when trying to open a specially crafted PowerPoint file. The application incorrectly handles the error case for a function's result, leading to reading data from the file into an invalid memory address.

CVE-2017-2790 affects JustSystems Ichitaro Office, where processing a record type of 0x3c from an Excel (.xls) file leads to a buffer overflow due to incorrect size calculation. Trusting the size to be greater than zero results in a heap-based buffer overflow, potentially allowing code execution in the application's context.

CVE-2017-2789 affects JustSystems Ichitaro Office 2016 Trial, where during the copying of file data into a buffer, the application may choose a value larger than the buffer size, leading to a heap-based buffer overflow. This overflow can allow code execution under the context of the application.

Plone versions 4.0 through 5.1a1 lack security declarations for Dexterity content-related WebDAV requests, allowing remote attackers to gain WebDAV access via unspecified vectors.

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

IBM Jazz for Service Management versions 1.1.2.1 and 1.1.3 are vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server.