CVE Vulnerability Catalog

A vulnerability in Check Point Security Gateways that may allow an attacker to read certain information when the gateway is connected to the internet and has Remote Access VPN or Mobile Access Software Blades enabled. A security fix is available.

In Google Chrome prior to 125.0.6422.112, a type confusion vulnerability exists in V8. A remote attacker can execute arbitrary code inside a sandbox via a crafted HTML page.

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected Authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute unauthorized PowerShell commands.

In Google Chrome prior to 125.0.6422.60, a type confusion vulnerability exists in V8. A remote attacker can execute arbitrary code inside a sandbox via a crafted HTML page.

A vulnerability in the Windows DWM Core Library allows elevation of privilege. Technical details are not disclosed in the description.

A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.

An out-of-bounds write vulnerability in V8 in Google Chrome prior to 124.0.6367.207 allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. (Chromium security severity: High)

In Google Chrome prior to 124.0.6367.201, a use-after-free vulnerability exists in Visuals. A remote attacker who compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

In Apache OFBiz before 18.12.13, a path traversal vulnerability exists due to improper limitation of a pathname to a restricted directory. Attackers can access files outside the intended directory.

TP-Link TL-WR841N routers have an improper authentication vulnerability in the httpd service, which listens on TCP port 80 by default. This allows network-adjacent attackers to disclose sensitive information, including stored credentials, without authentication.

A vulnerability in a legacy capability for preloading VPN clients and plug-ins in Cisco ASA and FTD Software allows an authenticated, local attacker with administrator privileges to execute arbitrary code with root-level privileges. The issue is due to improper validation of a file read from system flash memory. A successful exploit could allow code execution after the next reload, potentially altering system behavior.

A vulnerability in the management and VPN web servers of Cisco ASA and FTD Software allows an unauthenticated, remote attacker to cause an unexpected reload, resulting in DoS. The issue is due to incomplete error checking when parsing an HTTP header. A successful exploit could cause a DoS condition when the device reloads.

Wszystkie wersje CrushFTP przed 10.7.1 i 11.1.0 zawierają podatność na wstrzykiwanie szablonów po stronie serwera, która pozwala nieautoryzowanym atakującym zdalnym na odczyt plików z systemu plików poza piaskownicą VFS, obejście uwierzytelnienia w celu uzyskania dostępu administracyjnego oraz wykonanie zdalnego kodu na serwerze.

In Apache HugeGraph-Server from 1.0.0 before 1.3.0 (Java8 & Java11), a remote command execution (RCE) vulnerability exists. Attackers can execute arbitrary commands on the server.

In Palo Alto Networks PAN-OS GlobalProtect feature, a command injection vulnerability due to arbitrary file creation exists. An unauthenticated attacker can execute arbitrary code with root privileges on the firewall.

A vulnerability in the SmartScreen Prompt allows a security feature bypass. Technical details are not disclosed in the description.

There is a possible way to bypass security due to a logic error in the code, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

There is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

A critical command injection vulnerability was found in D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L up to 20240403. The affected component is the HTTP GET Request Handler in /cgi-bin/nas_sharing.cgi, where manipulation of the system argument leads to command injection. The attack can be launched remotely. The product is end-of-life and no longer supported.

In D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L (up to 20240403), a vulnerability exists involving hard-coded credentials in /cgi-bin/nas_sharing.cgi. An attacker can exploit this remotely.