CVE Vulnerability Catalog

A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root. This is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this by sending crafted input to the system CLI.

A vulnerability in the CLI of Cisco Secure FTD Software allows an authenticated local attacker with administrative credentials to execute arbitrary commands on the underlying operating system as root. This is due to insufficient input validation of user-supplied command arguments.

A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device, potentially impacting availability of services to other devices in the network. This is due to a memory leak when parsing IKEv2 packets. An attacker could send crafted IKEv2 packets, exhausting resources and eventually requiring manual reload.

A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device, potentially impacting availability of services to other devices in the network. This is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could send crafted IKEv2 packets, exhausting resources and eventually requiring manual reload.

A vulnerability in a subset of CLI commands on Cisco Secure Firewall ASA and FTD Software allows an authenticated local attacker with administrator privileges to craft Lua code that could be used on the underlying operating system as root. This exists because user-provided input is not properly sanitized.

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software allows an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This is due to a logic error in the integration of Snort Engine rules with FTD Software.

A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software allows an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a DoS condition. This is due to improper implementation of the TLS protocol. TLS 1.3 is not affected.

A vulnerability in the REST API of Cisco Secure FMC Software allows SQL injection attacks. It is due to inadequate validation of user-supplied input. An authenticated attacker can send crafted requests to gain read access to the database and read certain files on the underlying OS.

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete parsing of the SSL handshake ingress packets. An attacker could exploit this vulnerability by sending crafted SSL handshake packets. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine restarts unexpectedly.

A vulnerability was discovered in the rpc.mountd daemon of the nfs-utils package for Linux, allowing an NFSv3 client to escalate privileges assigned in the /etc/exports file at mount time. This enables access to any subdirectory or subtree of an exported directory, regardless of file permissions and 'root_squash' or 'all_squash' attributes.

W jądrze Linuxa zidentyfikowano podatność w funkcji romfs_fill_super(), która ignoruje wartość zwracaną przez sb_set_blocksize(). Może to prowadzić do błędów podczas montowania systemu plików romfs, gdy rozmiar bloku jest niezgodny z konfiguracją urządzenia blokowego.

In the Linux kernel, the classmate-laptop driver lacks NULL pointer checks in several places where code using the accel object may run before that object's address is stored in the input device's driver data. Premature access to sysfs attributes can lead to a NULL pointer dereference and kernel crash.

In MariaDB server up to version 11.8.5, when the server audit plugin is enabled with the server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, an authenticated database user can invoke a SQL statement prefixed with double-hyphen (--) or hash (#) style comments, which is not logged.

IBM DevOps Plan 3.0.0 through 3.0.5 stores web page cache locally, allowing another system user to read it.

IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

DOMPurify versions 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can include closing rawtext tags like </textarea> in attribute values to break out of rawtext contexts and execute JavaScript when sanitized output is placed inside rawtext elements. The 3.x branch was fixed in 3.2.7; the 2.x branch was never patched.

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.

A hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Cleartext transmission of sensitive information (CWE-319) in a component used in Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.