CVE Vulnerability Catalog

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use-after-free vulnerability in Portals in Google Chrome prior to 94.0.4606.61. A remote attacker who compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

Use-after-free vulnerability in Indexed DB API in Google Chrome prior to 93.0.4577.82. A remote attacker who compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.

Assuming radio permission is gained, missing input validation in the modem interface driver prior to SMR Oct-2021 Release 1 results in a format string bug leading to kernel panic.

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

Grafana has a vulnerability that allows unauthenticated and authenticated users to view snapshots with the lowest database key by accessing specific paths. If the public_mode setting is enabled, unauthenticated users can also delete such snapshots. Authenticated users can delete snapshots regardless of this setting, leading to complete snapshot data loss.

W Apache HTTP Server 2.4.49 znaleziono lukę w normalizacji ścieżek, która umożliwia atak typu path traversal. Atakujący może uzyskać dostęp do plików poza skonfigurowanymi katalogami, co może prowadzić do zdalnego wykonania kodu, jeśli skrypty CGI są włączone dla tych ścieżek.

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

An information disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version: 2.01MT. An attacker can obtain a user name and password by forging a post request to the /getcfg.php page.

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.