CVE Vulnerability Catalog

A vulnerability in Remote Procedure Call Runtime allows for a remote Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt service availability.

A vulnerability in Remote Procedure Call (RPC) can lead to a denial of service (DoS). An attacker can exploit this flaw to block access to the service.

A vulnerability in Remote Procedure Call Runtime allows for remote procedure calls that can lead to denial of service.

A vulnerability in Remote Procedure Call Runtime allows for remote procedure calls that can lead to denial of service.

A vulnerability in Microsoft SharePoint Server allows for security feature bypass, potentially leading to unauthorized access to data.

A vulnerability in Remote Procedure Call (RPC) can lead to a denial of service (DoS). An attacker can exploit this flaw to block access to the service.

A vulnerability in Microsoft Excel allows for information disclosure, potentially leading to unauthorized access to user data.

A vulnerability in Microsoft Defender allows for elevation of privilege, potentially leading to unauthorized access to the system.

A vulnerability in Microsoft Outlook allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.

A vulnerability in Microsoft Outlook allows for spoofing, which may lead to unauthorized access to user information. An attacker can exploit this flaw to impersonate others in email correspondence.

A critical vulnerability has been found in Nesote Inout Blockchain FiatExchanger 3.0, affecting an unknown part of the file /index.php/coins/update_marketboxslider in the POST Parameter Handler. Manipulation of the argument marketcurrency leads to SQL injection.

A critical vulnerability was found in the Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System. The issue affects some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx in the Duty Module, where manipulation of the argument Filedata leads to unrestricted file uploads.

A critical vulnerability was found in IBOS OA 4.5.5 in the createDeleteCommand function of the file ?r=article/default/delete of the Delete Packet component. Manipulation of this function leads to SQL injection, allowing for remote attacks.

A critical vulnerability was found in SourceCodester AC Repair and Services System version 1.0. The issue affects unknown processing of the file Master.php?f=save_service in the HTTP POST Request Handler component, leading to SQL injection.

A flaw was found in the skcipher_recvmsg function in the Linux kernel’s interface for symmetric key cipher algorithms. This flaw allows a local user to crash the system.

A Cross-site Scripting (XSS) vulnerability, stored in the GitHub repository amauric/tarteaucitron.js prior to version 1.13.1. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the victim's browser context.

Version 2.15.0 of fast-poster is vulnerable to Cross Site Scripting (XSS). The file upload check only verifies binary image data but does not strictly check the file suffix, leading to stored XSS.

TwoNav version 2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the user's browser context.

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.

A buffer overflow vulnerability in the aswSnx.sys driver of Avast AntiVirus before version 19.7 allows a local attacker to cause a denial of service (DoS) via a crafted request.