CVE Vulnerability Catalog

The graphics driver in Huawei P8 and Mate S smartphones before specific software versions allows attackers to cause a system crash or gain privileges via a crafted application with graphics permissions.

The XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS versions 7.1 to 7.5 allows remote attackers to cause denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request.

The fw_cfg_write and fw_cfg_read functions in QEMU before version 2.4, when built with Firmware Configuration device emulation support, allow guest OS users with CAP_SYS_RAWIO privileges to cause denial of service or potentially execute arbitrary code via an invalid current entry value in firmware configuration.

Squid versions 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, allowing remote attackers to cause a denial of service via a crafted HTTP response related to Vary headers.

A heap-based buffer overflow in the Icmp6::Recv function in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service or write sensitive information to log files via an ICMPv6 packet.

EMC Documentum D2 before version 4.6 lacks intended ACLs for configuration objects, allowing remote authenticated users to modify objects via unspecified vectors.

Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before version 4.05.000, PFXEXEDV before version 4.05.000, PFXEXEDLS before version 4.05.000, and PFXEXGRPLS before version 4.05.000 allows remote attackers to execute arbitrary code.

Eaton Lighting EG2 Web Control version 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie.

Cisco UCS Invicta C3124SA devices from versions 4.3.1 to 5.0.1, UCS Invicta Scaling System, and Whiptail Racerunner improperly store a default SSH private key. This allows remote attackers to gain root access via unspecified vectors.

Cisco Prime Infrastructure versions 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) version 1.2 are vulnerable to remote code execution by attackers who can exploit crafted deserialized data in an HTTP POST request.

The web API in Cisco Prime Infrastructure versions 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter.

The Menubook plugin before version 0.9.3 for baserCMS has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators.

The Recruit plugin before version 0.9.3 for baserCMS has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators.

The Casebook plugin before version 0.9.4 for baserCMS has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators.

Eaton Lighting EG2 Web Control version 4.04P and earlier allows remote attackers to read the configuration file, potentially exposing credentials.

The FTP server in Pro-face GP-Pro EX EX-ED before version 4.05.000 has hardcoded credentials, allowing remote attackers to bypass authentication.

Cisco TelePresence Server versions 4.1(2.29) through 4.2(4.17), as well as Mobility Services Engine 8710, Multiparty Media 310, 320, and 820, and virtual machine devices are vulnerable to remote attacks that can lead to denial of service through memory consumption or device reload via crafted HTTP requests.

Cisco TelePresence Server 3.1 and devices such as Mobility Services Engine 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) are vulnerable to an attack that can lead to denial of service by sending malformed STUN packets.

The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might lead to the use of a weaker Diffie-Hellman key.