CVE Vulnerability Catalog

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This is due to insufficient input validation.

Stored XSS vulnerability in Roundcube before 1.4.15, 1.5.5, and 1.6.4 allows a remote attacker to load arbitrary JavaScript code via an HTML email with a crafted SVG document.

Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. The attacker exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user, then exploited another component (CVE-2023-20273) to elevate privilege to root and write an implant. CVE-2023-20198 has a CVSS score of 10.0, CVE-2023-20273 has a CVSS score of 7.2.

Elevation of Privilege vulnerability in Skype for Business. Technical details are not available in the description.

Security Feature Bypass vulnerability in Windows Mark of the Web. Technical details are not available in the description.

Information Disclosure vulnerability in Microsoft WordPad. Technical details are not available in the description.

Sensitive information disclosure vulnerability in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

The HTTP/2 protocol allows a denial of service (server resource consumption) due to the ability to quickly reset many streams through request cancellation. This attack has been exploited in the wild from August to October 2023.

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

Atlassian zgłosił problem, w którym zewnętrzni atakujący mogli wykorzystać nieznaną wcześniej podatność w publicznie dostępnych instancjach Confluence Data Center i Server do tworzenia nieautoryzowanych kont administratorów Confluence oraz uzyskiwania dostępu do instancji Confluence.

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS and IOS XE Software could allow an authenticated, remote attacker with administrative control of a group member or key server to execute arbitrary code or cause a device crash. It is due to insufficient validation of attributes in GDOI and G-IKEv2 protocols.

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to upload and download arbitrary files via J-Web, leading to loss of integrity or confidentiality, and may allow chaining to other vulnerabilities.

XSS vulnerability in Roundcube before 1.4.14, 1.5.4, and 1.6.3 allows XSS via text/plain email messages with crafted links.

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.