CVE Vulnerability Catalog

Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, allowing remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request.

Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before version 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

SysAid Help Desk versions before 15.2 are vulnerable to an XML Entity Expansion (XEE) attack, allowing remote attackers to cause denial of service through a large number of nested entity references in an XML document.

Multiple directory traversal vulnerabilities in SysAid Help Desk before version 15.2 allow remote attackers to read arbitrary files and cause denial of service.

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, allowing remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.

SAP Adaptive Server Enterprise (ASE) before version 15.7 SP132 and 16.0 before version 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism, enabling access to the probe account via a crafted response.

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, allowing remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

The oz_usb_handle_ep_data function in the OZWPAN driver in the Linux kernel through version 4.0.5 allows remote attackers to cause a denial of service via a crafted packet, leading to a divide-by-zero error and system crash.

In the Linux kernel up to version 4.0.5, there is a vulnerability in the OZWPAN driver that does not ensure certain length values are sufficiently large. This allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted packet.

An integer signedness error in the oz_hcd_get_desc_cnf function in the OZWPAN driver in the Linux kernel through version 4.0.5 may allow remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet.

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data.

Apache Tomcat versions 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 do not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body. This allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted zenworks-fileupload request.

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data.

Cisco Edge 300 software versions 1.0 and 1.1 on Edge 340 devices allow local users to obtain root privileges via unspecified commands.

Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors.

Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, allowing local users to obtain root privileges via crafted vpnagent options.

Xen versions 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, allowing local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.

SAP Afaria does not properly restrict access to unspecified functionality, allowing remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact.

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors.