CVE Vulnerability Catalog

The authorization framework in Apache Hive versions 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0, and 1.2.1 allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations.

FreeBSD versions 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection with the TCP_MD5SIG and TCP_NOOPT socket options.

The SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service via a crafted ICMPv6 packet.

CVE-2015-8789 is a use-after-free vulnerability in the EbmlMaster::Read function in libEBML before version 1.3.3. It allows context-dependent attackers to have unspecified impact via a 'deeply nested element with infinite size' followed by another upper-level element in an EBML document.

Directory traversal vulnerability in the set_skin function in rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.

Report Builder in IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 is vulnerable to an attack that can cause a Report Builder server outage via a crafted request to a Report Builder instance URL.

A stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request.

The vulnerability in the CIFS optimization functionality on Cisco WAAS and vWAAS devices before version 5.3.5d and 5.4 and 5.5 before version 5.5.3 allows remote attackers to cause a denial of service via crafted network traffic.

CVE-2015-6319 is a vulnerability in the web-based management interface on Cisco RV220W devices that allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request.

The client_host function in parsers.c in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.

The remove_chunked_transfer_coding function in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.

The Montgomery code in the math/big library in Go 1.5.x before version 1.5.3 mishandles carry propagation, leading to incorrect output. This makes it easier for attackers to obtain private RSA keys via unspecified vectors.

A race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key.

The Wifi hotspot in Lenovo SHAREit before version 3.2.0 for Windows has a hardcoded password of 12345678, making it easier for remote attackers to gain access when within WLAN coverage.

Lenovo SHAREit before 3.2.0 for Windows and before 3.5.48_ww for Android transfers files in cleartext, allowing remote attackers to obtain sensitive information by sniffing the network or conduct man-in-the-middle attacks.

An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device. This allows local users to gain privileges via a character device in /dev, related to an ioctl.

CakePHP versions 2.x and 3.x before 3.1.5 may allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.

NTP versions 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, known as a 'skeleton key.'

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, may allow attackers to cause a denial of service or possibly have other impact via crafted data. An example is a buffer over-read resulting from an inverted length check in hb-ot-font.cc.