CVE Vulnerability Catalog

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.

Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.

Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder caused by incomplete error checking when parsing MIME fields of the HTTP header. An unauthenticated remote attacker can send crafted HTTP packets, causing the Snort 3 Detection Engine to unexpectedly restart.

A vulnerability in the Snort 3 HTTP Decoder due to a buffer handling error when parsing MIME fields of the HTTP header can result in a buffer under-read. An unauthenticated remote attacker can send crafted HTTP packets to cause information disclosure or a crash of the Snort 3 Detection Engine.

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, IP Phone 7800/8800 Series, and Video Phone 8875 running Cisco SIP Software allows an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. The issue exists due to insufficient validation of user-supplied input. Exploitation requires the user to click a crafted link, and the phone must be registered to Cisco Unified Communications Manager with Web Access enabled (disabled by default).

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software allows an authenticated remote attacker with administrative credentials to view sensitive information in clear text. This occurs when SIP media component logging is enabled and credentials are stored unencrypted.

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker to run JavaScript in the context of the targeted logged-out user. Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Netty versions prior to 4.1.128.Final and 4.2.7.Final contain an SMTP command injection vulnerability due to insufficient input validation for Carriage Return (\r) and Line Feed (\n) characters in user-supplied parameters. Parameters are directly concatenated into the SMTP command string without sanitization, allowing attackers to inject arbitrary SMTP commands. Because injected commands are sent from the server's trusted IP address, resulting emails will likely pass SPF and DKIM checks, allowing remote attackers to forge arbitrary emails from the trusted server. This issue has been patched in versions 4.1.129.Final and 4.2.8.Final.

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries systems.

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver. It could allow a local authenticated user to cause a Windows blue screen error.

In NetX Duo before version 6.4.4, a component of Eclipse Foundation ThreadX, there is an incorrect bound check resulting in an out-of-bounds read by two bytes.

A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure.

An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. The vulnerability affects versions that have not reached End of Technical Support (EoTS).

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.

On BIG-IP, undisclosed endpoints containing static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Software versions that have reached End of Technical Support (EoTS) are not evaluated.

When BIG-IP Advanced WAF is configured with SSRF protection or NGINX with App Protect Bot Defense, undisclosed requests can disrupt new client requests. Software versions that have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols that do not have message integrity protection. Note: Software versions that have reached End of Technical Support (EoTS) are not evaluated.

Under undisclosed traffic conditions and circumstances beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB. Note: Software versions that have reached End of Technical Support (EoTS) are not evaluated.