CVE Vulnerability Catalog

SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, leading to a null pointer exception and icman outage.

In libtiff version 4.0.6, there is an out-of-bounds write in the tiffcp tool that affects tiled images with odd tile width versus image width. This issue was reported as MSVR 35103, also known as 'cpStripToTile heap-buffer-overflow.'

The libtiff library version 4.0.6 has an out-of-bounds read in the readContigTilesIntoBuffer() function.

In libtiff version 4.0.6, there is a vulnerability related to a buffer overflow in the readContigStripsIntoBuffer() function, leading to reading an undefined buffer.

The libtiff library version 4.0.6 has out-of-bounds write vulnerabilities in the tiffcrop.c tool. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.

The libtiff library version 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in the t2p_process_jpeg_strip() function.

Pliki tif_predict.h i tif_predict.c w libtiff 4.0.6 zawierają asercje, które mogą prowadzić do awarii asercji w trybie debugowania lub przepełnienia bufora w trybie produkcyjnym, gdy przetwarzane są nietypowe rozmiary kafelków, takie jak YCbCr z subsamplingiem.

The libtiff library version 4.0.6 has an issue in the error code path of the TIFFFlushData1() function that does not reset the tif_rawcc and tif_rawcp members. This leads to a heap buffer overflow.

In libtiff version 4.0.6, there are out-of-bounds write vulnerabilities in heap allocated buffers related to tif_pixarlog.c. This issue was reported as MSVR 35094, also known as 'PixarLog horizontalDifference heap-buffer-overflow.'

In version 1.14 and earlier of the Soap Lite extension for Perl, there is a potential attack that involves defining 10 or more XML entities, leading to excessive memory usage when handling an external SOAP call.

Certain SIEMENS branded IP camera models may allow an attacker with network access to obtain administrative credentials. This affects models prior to specific software versions.

Palo Alto Networks PAN-OS versions before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allow local users to gain privileges via crafted values of unspecified environment variables.

Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before version 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code.

A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition.

A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection.

A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device. Email that should have been filtered could instead be forwarded by the device.

The HDF5 1.8.16 library has a vulnerability that allows modification of the loop's index when initializing an array, potentially leading to out-of-bounds access. The value used for space allocation comes from the file, creating a risk of manipulation by an attacker.

The HDF5 library version 1.8.16 fails to check if certain message types support a particular flag, leading to casting the structure to an alternative structure and assigning values to fields not supported by the message type. This can result in code execution under the context of the library.

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library fails to ensure that the precision is within the bounds of the size, leading to arbitrary code execution.