CVE Vulnerability Catalog

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.

W OpenSSH przed wersją 7.3, gdy do haszowania haseł użytkowników używane są algorytmy SHA256 lub SHA512, sshd stosuje haszowanie BLOWFISH dla statycznego hasła, gdy nazwa użytkownika nie istnieje. To umożliwia zdalnym atakującym enumerację użytkowników poprzez wykorzystanie różnicy czasowej w odpowiedziach, gdy podane jest długie hasło.

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This affects FTD Software versions 6.1.x on specific products with FDM enabled. An attacker could exploit this to manipulate the audit log, potentially hiding unauthorized actions.

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device.

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 contain multiple command injection vulnerabilities. A malicious administrator with configuration privileges may bypass the user interface and escalate privileges to root.

In EMC RecoverPoint before 4.4.1.1 and EMC RecoverPoint for Virtual Machines before 5.0, a sensitive information disclosure vulnerability exists due to incorrect permissions on a system file. A malicious administrator with configuration privileges may access this file and compromise the system.

The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

Plik authfile.c w sshd w OpenSSH przed wersją 7.4 nieprawidłowo uwzględnia skutki działania realloc na zawartości bufora, co może umożliwić lokalnym użytkownikom uzyskanie wrażliwych informacji o kluczach prywatnych poprzez wykorzystanie dostępu do procesu potomnego z ograniczonymi uprawnieniami.

Zidentyfikowano podatność w rodzinie CPU SIMATIC S7-300, S7-400 oraz S7-410, która pozwala atakującemu z dostępem do sieci na port 102/tcp lub przez Profibus na uzyskanie poświadczeń z PLC, jeśli na urządzeniach skonfigurowano poziom ochrony 2.

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.

Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document.

The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."

Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before version 2.3.90 allow remote attackers to inject arbitrary web scripts or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.