CVE Vulnerability Catalog

Microsoft Internet Explorer versions 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability.'

Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page. This is a memory corruption vulnerability in the browser.

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability'.

Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page, known as 'Internet Explorer Memory Corruption Vulnerability.'

A vulnerability in Kerberos in Microsoft Windows allows man-in-the-middle attackers to bypass authentication during a domain account password change, related to a fallback to NTLM authentication.

CVE-2016-5330 describes an untrusted search path vulnerability in the HGFS (Shared Folders) feature in VMware Tools 10.0.5, allowing local users to gain privileges via a Trojan horse DLL in the current working directory.

IBM Security QRadar SIEM versions 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors.

Siemens SINEMA Server uses weak permissions for the application folder, allowing local users to gain privileges via unspecified vectors.

SQL injection vulnerability in Moxa SoftCMS before version 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.

HPE Release Control (RC) versions 9.13, 9.20, and 9.21 before 9.21.0005 p4 allow remote authenticated users to conduct server-side request forgery (SSRF) attacks, potentially leading to the disclosure of sensitive information or denial of service.

Cisco IOS versions 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 improperly dequeue invalid NTP packets, allowing remote attackers to cause a denial of service (interface wedge) by sending many crafted NTP packets.

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields.

A vulnerability in Cisco Unified Communications Manager IM and Presence Service allows remote attackers to cause a denial of service via crafted headers in a SIP packet, leading to a restart of the sipd process.

Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request.

CVE-2016-1429 describes a vulnerability in the web interface of Cisco RV180 and RV180W devices that allows remote attackers to read arbitrary files via a crafted HTTP request.

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, allowing remote authenticated users to obtain root access via a login session with that account.

The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters.

The auth_password function in sshd in OpenSSH before version 7.3 does not limit password lengths for authentication, allowing remote attackers to cause a denial of service via long strings.

The is_ashmem_file function in the KGSL Linux Graphics Module in Linux kernel 3.x mishandles pointer validation, allowing attackers to bypass intended access restrictions.

The MSM QDSP6 audio driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service through out-of-bounds writes. This can lead to memory corruption or other unspecified impacts.