CVE Vulnerability Catalog

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

A vulnerability in FineCMS up to July 7, 2017 allows remote PHP code execution by placing code after "<?php" in a route=template request.

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server allows an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The issue is due to improper shell invocations.

A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) allows an unauthenticated, remote attacker to gain full access to the system. The issue is due to static, default credentials for the Cisco ESC UI that are shared between installations.

A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the affected software.

A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework allows an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller and Cisco OpenStack deployments. The issue arises from logging credentials in clear text.

A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links.

IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands.

IBM Maximo Asset Management versions 7.1, 7.5, and 7.6 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

IBM Security Guardium versions 10.0 and 10.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for GNTMAP_device_map and GNTMAP_host_map mapping, which may lead to denial of service or privileged host OS access.

The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, which can lead to count mismanagement and memory corruption. Guest OS users can cause a denial of service or gain privileged host OS access.

Xen through 4.8.x does not validate memory allocations during certain P2M operations, allowing guest OS users to obtain privileged host OS access, known as XSA-222.

Xen versions up to 4.8.x do not validate the port numbers of polled event channel ports, allowing guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information.

The shadow-paging feature in Xen through 4.8.x mismanages page references, leading to a race condition. This allows guest OS users to obtain Xen privileges, known as XSA-219.

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, allowing backend attackers to obtain sensitive information or gain privileges.

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer.

JabberD 2.x before version 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.