CVE Vulnerability Catalog

The vulnerability in aiohttp allows an attacker to modify the HTTP request through improper validation, potentially leading to header injection or the creation of new requests if the attacker controls the HTTP method.

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled.

The Email Encoder plugin for WordPress by Jannis Thuemmig in version 2.1.8 and earlier contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

In Symfony from versions 2.0.0, 5.0.0, and 6.0.0 up to 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but do not actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony escapes the output of the affected filters.

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

A Cross-Site Scripting vulnerability in Wonder CMS versions 3.2.0 through 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

A Spoofing vulnerability in Microsoft OneNote allows an attacker to impersonate trusted content or files.

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to bypass IP address restrictions. This is due to improper parsing of the configuration for IP geolocation rules.

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to intercept the SAML assertion of a user authenticating to a remote access VPN session. The issue is due to insufficient validation of the login URL.

A vulnerability in the remote access SSL VPN feature of Cisco ASA and FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid username and password. This is due to improper error handling during remote access VPN authentication. An attacker could send crafted requests during session establishment, bypassing the certificate policy while retaining privileges.

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass configured policies. This is due to a logic error when access control policies are populated. An attacker could exploit this by establishing a connection, potentially bypassing access control rules.

A vulnerability in the Snort detection engine in multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies. This is due to a flaw in the FTP module. An attacker could send crafted FTP traffic to bypass FTP inspection and deliver a malicious payload.

A vulnerability in the TLS 1.3 implementation of Cisco FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This is due to a logic error in memory allocation handling during a TLS 1.3 session. An attacker could send a crafted TLS 1.3 message sequence to cause a reload, resulting in a DoS condition.

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This is due to an implementation error in SSL/TLS session handling that can prevent the release of a session handler under specific conditions. An attacker could exploit this by sending crafted SSL/TLS traffic, increasing the probability of session handler leaks and eventually depleting the available pool.

A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This is due to a logic error when an SSL/TLS certificate under load is accessed during SSL connection initiation. An attacker could send a high rate of SSL/TLS connection requests, causing the engine to reload, resulting in a bypass or DoS condition depending on configuration.

A vulnerability in the interaction between the SMB protocol preprocessor and the Snort 3 detection engine in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition. The issue is due to improper error-checking when processing SMB traffic. An attacker could exploit this by sending a crafted SMB packet stream, potentially causing the Snort process to reload and resulting in DoS.

Multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass a configured ACL and allow traffic that should be denied. These vulnerabilities are due to a logic error in constructing and applying per-user-override rules. A successful exploit could allow the attacker to bypass the interface ACL and access protected resources.