CVE Vulnerability Catalog

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, leading to a double free in nf_hook_slow().

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

Problem z myleniem typów został rozwiązany dzięki poprawionym kontrolom. Wykryta podatność dotyczy przetwarzania złośliwie przygotowanej zawartości internetowej, co może prowadzić do wykonania dowolnego kodu.

A critical path traversal vulnerability exists in D-Link DIR-859 1.06B01 in the /hedwig.cgi file of the HTTP POST Request Handler. Manipulation of the 'service' argument allows remote attack, and the exploit has been publicly disclosed.

W NetScaler ADC i NetScaler Gateway występuje niewłaściwe ograniczenie operacji w obrębie bufora pamięci, co umożliwia nieautoryzowane zdalne zablokowanie usługi oraz odczyt pamięci poza dozwolonym zakresem.

A code injection vulnerability in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP, or SNIP management interface to perform authenticated (low privileged) remote code execution on the Management Interface.

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.

A command injection vulnerability in web components of Ivanti Connect Secure and Ivanti Policy Secure. It allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure. It allows a remote attacker to access restricted resources by bypassing control checks.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Wystąpił problem związany z użyciem po zwolnieniu pamięci, który został rozwiązany poprzez poprawę zarządzania pamięcią. Problem ten został naprawiony w iOS 17, iPadOS 17, iOS 15.8.7 oraz iPadOS 15.8.7.

The issue was addressed with improved checks in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of reports that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

It was discovered that an nft object or expression could reference an nft set in a different nft table, leading to a use-after-free once that table was deleted.

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. It is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type 'eval'. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Wykryto podatność na wstrzykiwanie poleceń systemowych w starszych modelach QNAP VioStor NVR działających na oprogramowaniu QVR Firmware 4.x. W przypadku jej wykorzystania, uwierzytelnieni użytkownicy mogą wykonywać polecenia przez sieć.

An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection.

VisiLogic w wersjach przed 9.9.00, używany w PLC i HMI Vision oraz Samba, korzysta z domyślnego hasła administracyjnego. Nieautoryzowany atakujący z dostępem do sieci może przejąć kontrolę administracyjną nad podatnym systemem.