CVE Vulnerability Catalog

Valve Steam version 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, allowing local users to gain privileges via a malicious steam.exe file.

CVE-2015-7866 describes an unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel of the NVIDIA GPU graphics driver. This allows local users to gain privileges via a Trojan horse application.

The Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver has a vulnerability that allows local users to gain privileges due to improper access restrictions to the stereosvrpipe named pipe.

The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect versions 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.

GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before version 346.87 and R352 before version 352.41 for Linux and R352 before version 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory. This allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

Cisco Virtual Topology System (VTS) versions 2.0(0) and 2.0(1) are vulnerable to a denial of service attack that can lead to CPU and memory exhaustion and TCP port outage through a flood of crafted TCP packets.

The fts3_tokenizer function in SQLite, used in Apple iOS before version 8.4 and OS X before version 10.10.4, allows remote attackers to execute arbitrary code or cause application crashes via a SQL command that triggers an API call with a crafted pointer value in the second argument.

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.

The Ice Faces servlet in ag_server_service.exe in Tibbo AggreGate before version 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

Arris DG860A, TG862A, and TG862G devices with firmware from TS0703128_100611 to TS0705125D_031115 have a hardcoded administrator password derived from a serial number. This makes it easier for remote attackers to gain access via the web management interface, SSH, TELNET, or SNMP.

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, allowing remote attackers to cause a denial of service (out-of-bounds memory access and device restart).

Arista EOS versions before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allow remote attackers to execute arbitrary code as root by leveraging management-plane access.

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, allowing remote attackers to bypass intended access restrictions.

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input.

The Adobe Premiere Clip app before version 1.2.1 for iOS mishandles unspecified input, which may lead to unknown impact and attack vectors.

Integer overflow in Google Picasa before version 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, leading to a heap-based buffer overflow.

A stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before version 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline argument.

A heap-based buffer overflow in libsndfile version 1.0.25 allows remote attackers to exploit the headindex value in the header of an AIFF file.