CWE-755 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-755/ Sun, 26 Feb 2023 06:51:16 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-755 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-755/ 32 32 CVE-2018-8039 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8039/ Sun, 26 Feb 2023 06:51:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8039/ It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via ‘System.setProperty(“java.protocol.handler.pkgs”, “com.sun.net.ssl.internal.www.protocol”);’. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception […]

The post CVE-2018-8039 appeared first on CVE Vulnerability.

]]> It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via ‘System.setProperty(“java.protocol.handler.pkgs”, “com.sun.net.ssl.internal.www.protocol”);’. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks.

The post CVE-2018-8039 appeared first on CVE Vulnerability.

]]> CVE-2018-7852 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7852/ Sun, 26 Feb 2023 06:51:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7852/ A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.

The post CVE-2018-7852 appeared first on CVE Vulnerability.

]]> A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.

The post CVE-2018-7852 appeared first on CVE Vulnerability.

]]> CVE-2018-7849 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7849/ Sun, 26 Feb 2023 06:51:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7849/ A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus.

The post CVE-2018-7849 appeared first on CVE Vulnerability.

]]> A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus.

The post CVE-2018-7849 appeared first on CVE Vulnerability.

]]> CVE-2018-21088 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21088/ Sun, 26 Feb 2023 06:48:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21088/ An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can cause a reboot because InputMethodManagerService has an unprotected system service. The Samsung ID is SVE-2017-9995 (January 2018).

The post CVE-2018-21088 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can cause a reboot because InputMethodManagerService has an unprotected system service. The Samsung ID is SVE-2017-9995 (January 2018).

The post CVE-2018-21088 appeared first on CVE Vulnerability.

]]> CVE-2018-21091 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21091/ Sun, 26 Feb 2023 06:48:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21091/ An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 (January 2018).

The post CVE-2018-21091 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 (January 2018).

The post CVE-2018-21091 appeared first on CVE Vulnerability.

]]> CVE-2018-19991 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19991/ Sun, 26 Feb 2023 06:48:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19991/ VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

The post CVE-2018-19991 appeared first on CVE Vulnerability.

]]> VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

The post CVE-2018-19991 appeared first on CVE Vulnerability.

]]> CVE-2018-1677 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1677/ Sun, 26 Feb 2023 06:47:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1677/ IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.

The post CVE-2018-1677 appeared first on CVE Vulnerability.

]]> IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.

The post CVE-2018-1677 appeared first on CVE Vulnerability.

]]> CVE-2018-16781 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16781/ Sun, 26 Feb 2023 06:47:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16781/ ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.

The post CVE-2018-16781 appeared first on CVE Vulnerability.

]]> ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.

The post CVE-2018-16781 appeared first on CVE Vulnerability.

]]> CVE-2018-1269 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1269/ Sun, 26 Feb 2023 06:45:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1269/ Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP […]

The post CVE-2018-1269 appeared first on CVE Vulnerability.

]]> Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.

The post CVE-2018-1269 appeared first on CVE Vulnerability.

]]> CVE-2018-11921 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11921/ Sun, 26 Feb 2023 06:45:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11921/ Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD […]

The post CVE-2018-11921 appeared first on CVE Vulnerability.

]]> Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.

The post CVE-2018-11921 appeared first on CVE Vulnerability.

]]>