CVE Vulnerability Catalog

A memory corruption vulnerability in Graphics Linux occurs while assigning a shared virtual memory region during an IOCTL call. It may lead to unintended memory modification.

Memory corruption occurs while submitting a large list of sync points in an AUX command to IOCTL_KGSL_GPU_AUX_COMMAND. It may lead to unintended memory modification.

Memory corruption in DSP Services occurs during a remote call from HLOS to DSP. It may lead to unintended memory modification.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. Processing web content may lead to arbitrary code execution.

An out-of-bounds read issue in web content processing that may disclose sensitive information. Fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. Apple is aware of reports of exploitation against iOS versions before 16.7.1.

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file.

In ownCloud core before version 10.13.1, an attacker can access, modify, or delete any file without authentication if the victim's username is known and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the file owner. The earliest affected version is 10.6.0.

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key.

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application.

Podatność w sterowniku systemu plików dziennika Windows umożliwia podniesienie uprawnień. Atakujący może wykorzystać tę lukę, aby uzyskać wyższe uprawnienia w systemie.

An elevation of privilege vulnerability in the Windows Cloud Files Mini Filter Driver. It may allow an attacker to gain higher privileges on the system.

An elevation of privilege vulnerability in the Windows DWM Core Library. It may allow an attacker to gain higher privileges on the system.

A security feature bypass vulnerability in Windows SmartScreen. It may allow an attacker to bypass protective mechanisms.

Path traversal vulnerability in SysAid On-Premise before 23.3.36, allowing file write to Tomcat webroot leading to code execution. Exploited in the wild in November 2023.

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability.

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility. It may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Software versions which have reached End of Technical Support (EoTS) are not evaluated.

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. This vulnerability is caused by the incomplete patch of CVE-2023-37679.

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.