CVE Vulnerability Catalog

Heap-based buffer overflow in the PdfParser::ReadObjects function in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

The mDNS responder in BOSE Soundtouch 30 incorrectly responds to IPv4 unicast queries with non-link-local source addresses. This can lead to denial of service or exposure of potentially sensitive information.

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, allowing remote attackers to cause a denial of service (traffic amplification) and may lead to information leakage.

The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter.

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function.

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

Buffer overflow in Quest One Identity Privilege Manager for Unix before version 6.0.0.061 allows remote attackers to gain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.

The GlobalProtect external interface in PAN-OS before version 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists. This allows remote attackers to enumerate account names and conduct brute-force attacks.

Trend Micro Threat Discovery Appliance version 2.6.1062r1 and earlier uses predictable session values, allowing remote attackers to bypass authentication by guessing the value.

Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests.

UDFclient (before version 0.8.8) has a custom strlcpy implementation that is vulnerable to buffer overflow. This issue occurs on systems with a C library that lacks its own strlcpy.

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled.

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole 'Simple PHP File Manager' component).

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization. The Technicolor DPC3928SL with specific firmware can be reached from the Internet using any SNMP community string.

A stack-based buffer overflow in the ipv6_addr_from_str function in RIOT prior to April 25, 2017, can be exploited by local and potentially remote attackers. Attackers may cause a denial of service or possibly have unspecified other impacts via a malformed IPv6 address.

FreeType 2 before March 26, 2017, has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.

The dpkg-source program in versions 1.3.0 through 1.18.23 allows the use of a non-GNU patch program and does not provide a protection mechanism for blank-indented diff hunks, enabling remote attackers to conduct directory traversal attacks via a crafted Debian source package.