CVE Vulnerability Catalog

A null pointer dereference in paddle.flip in PaddlePaddle before version 2.5.0 results in a runtime crash and denial of service.

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link.

In Directus, from version 10.3.0 to 10.5.0, permission filters are not properly checked when using GraphQL subscriptions. This leads to unauthorized users receiving events they should not have access to.

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query.

The copyparty file server software prior to version 1.8.7 contains a reflected XSS vulnerability via URL parameters `?k304=...` and `?setck=...`. This can lead to moving or deleting existing files on the server, as well as uploading new files using the account of the person who clicks the malicious link.

Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, allowing subsequent functions to be called with root privileges.

TYPO3 HTML Sanitizer, an HTML sanitizer tool, has an encoding issue in the serialization layer that allows malicious markup nested in a `noscript` element to be incorrectly encoded. Although `noscript` is disabled by default, it may be enabled in custom configurations, allowing bypassing of the XSS protection mechanism.

Cal.com is scheduling software that has a vulnerability allowing active sessions to remain after enabling 2FA. When 2FA is activated on an account logged in on two or more devices, the other device(s) remain logged in without requiring identity verification.

Vyper is a Pythonic programming language targeting the Ethereum Virtual Machine (EVM). Prior to version 0.3.10, the ecrecover precompile did not fill the output buffer if the signature did not verify, potentially leading to false signature verification results.

DataEase is a data visualization analysis tool that prior to version 1.18.9 had a stored cross-site scripting (XSS) vulnerability in the panel and dataset. The vulnerability has been fixed in version 1.18.9.

In version 13.0.50.20220805-git of GNU gdb (GDB), a heap buffer overflow was discovered in the function pe_as16() in the file /gdb/coff-pe-read.c.

In version 13.0.50.20220805-git of GNU gdb (GDB), a heap use after free vulnerability was discovered in the add_pe_exported_sym() function in /gdb/coff-pe-read.c.

In version 13.0.50.20220805-git, GNU gdb (GDB) was found to contain a stack overflow in the ada_decode function in /gdb/ada-lang.c.

Contao is an open source content management system. In versions from 4.0.0 to 4.9.42, 4.13.28, and 5.1.10, untrusted backend users can inject malicious code into headline fields, which will be executed both in the element preview and on the website.

A vulnerability in Envoy that causes the application to crash when the `origin` header is removed between `decodeHeaders` and `encodeHeaders`. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 contain a fix for this issue.

In Envoy, prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, gRPC access loggers using listener's global scope can cause a `use-after-free` crash when the listener is drained. Versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 have a fix for this issue.

Tuleap prior to version 14.10.99.4 (Community Edition) and prior to versions 14.10-2 and 14.9-5 (Enterprise Edition) improperly handles content displayed in card fields, which may allow a malicious user to execute uncontrolled code.

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.

The Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.