CVE Vulnerability Catalog

Jeecg-boot version 3.4.3 was found to contain a SQL injection vulnerability in the /sys/user/putRecycleBin component. An attacker can exploit this flaw to execute unauthorized database queries.

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability in the /sys/dict/queryTableData component. An attacker can exploit this flaw to execute unauthorized database queries.

The Amasty Blog Pro plugin versions 2.10.3 and 2.10.4 for Magento 2 contain a Stored Cross-site Scripting (XSS) vulnerability due to the duplicate post function.

Amasty Blog version 2.10.3 is vulnerable to Cross-Site Scripting (XSS) via the leave comment functionality. This allows an attacker to inject malicious JavaScript code into the page.

A broken access control vulnerability was found in Maarch RM 2.8.3. When previewing documents (PDF, email) from an archive, the application generates a URL containing an MD5 hash of the file, which is accessible without authentication.

An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This is due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. An attacker could exploit this by sending crafted SIP traffic, leading to a denial of service (DoS) condition.

A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This is due to improper restriction of access to HTTPS endpoints. An attacker could exploit this by sending specific messages to the HTTPS handler, allowing configuration changes that should only be performed through Firepower Management Center (FMC).

Multiple vulnerabilities in the SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition. This is due to improper management of system resources when processing SMB2 traffic. An attacker could send a high rate of SMB2 packets to trigger a reload of the Snort process. With preserve-connection enabled (default), policy bypass and malicious payload delivery are also possible.

A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This is due to improper implementation of countermeasures against a Bleichenbacher attack on devices using SSL decryption policies. An attacker could exploit this by sending crafted TLS messages, potentially allowing decryption of previously captured TLS sessions.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This is due to improper input validation for specific CLI commands. An attacker could inject operating system commands into a legitimate command, escaping the restricted prompt and executing arbitrary commands.

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This is due to a flaw in authorization verifications during the VPN authentication flow. An attacker with valid credentials could send a crafted packet during authentication, gaining access with another user's privileges.

Multiple vulnerabilities in the SMB2 processor of the Snort detection engine on various Cisco products could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition on an affected device.

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series running ASA or FTD Software could allow an unauthenticated attacker with physical access to bypass secure boot functionality. This is due to a logic error in the boot process. An attacker could inject malicious code into a specific memory location during boot, allowing persistent code execution and breaking the chain of trust.

In Liferay Portal and DXP, the Test LDAP Users functionality exposes LDAP credentials in the page URL when paginating through the user list. Man-in-the-middle attackers or those with access to request logs can capture these credentials.

Liferay products are missing SSL certificate validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 19, 7.3 before update 4, and 7.4 GA does not properly check permission of form entries, which allows remote authenticated users to view and access all form entries.

An IDOR vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 through 7.4.3.4, and Liferay DXP 7.3 before update 4, and 7.4 GA allows remote authenticated users to view and access form entries via the `formInstanceRecordId` parameter.