CVE Vulnerability Catalog

A vulnerability in the PlexTrac platform prior to version 1.28.0 allows username enumeration via HTTP response time differences on invalid login attempts for accounts configured with the PlexTrac authentication provider. An unauthenticated remote attacker can identify valid, unlocked user accounts.

CVE-2022-36083 affects JWE key management algorithms based on PBKDF2, which can be exploited to perform brute-force attacks by manipulating the `p2c` parameter. If misconfigured, an attacker can force disproportionate CPU resource consumption during JWE decryption.

In Kirby 2.5.12, a CSRF vulnerability was found in the delete page functionality. A remote attacker can craft a malicious CSRF page and force the user to delete a page.

The vulnerability allows an authenticated user to read sensitive session data stored in cleartext in the OAuth database. The affected device does not encrypt this information.

A flaw was found in AMQ Broker that can lead to partial interruption of system availability due to an Out of Memory (OOM) condition. An attacker can partially disrupt availability to the broker through a sustained attack of maliciously crafted messages.

A vulnerability in the inode_init_owner() function logic in the Linux kernel (fs/inode.c) allows local users to create files on XFS filesystems with unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a group not containing the user. This can lead to excessive permissions.

In Apache ActiveMQ Artemis prior to version 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending a crafted HTTP request. The vulnerability exists in firmware version v1.01.

Frappe ERPNext version 12.29.0 is vulnerable to XSS attacks. The software does not neutralize or incorrectly neutralizes user-controllable input before placing it in output used as a web page served to other users.

Multiple reflected XSS vulnerabilities were found in BPC SmartVista version 3.28.0. These flaws occur when handling error messages, allowing an attacker to execute JavaScript code on the client side.

A buffer overflow vulnerability was discovered in the Tenda AC9 router firmware version V15.03.2.13 in the httpd process. The issue occurs in the form_fast_setting_wifi_set function, potentially allowing remote code execution.

The vulnerability in Mealie 1.0.0beta3 fails to terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET request.

An XSS (Cross-Site Scripting) vulnerability was discovered in rageframe2 version 2.6.37. The flaw exists in user agent related parameters on the info.php page.

Authenticated stored cross-site scripting (XSS) vulnerability in the "Field Server Address" field of INTELBRAS ATA 200 firmware version 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.

A Storage XSS vulnerability was discovered in EyouCMS version 1.5.8, allowing an attacker to execute arbitrary web scripts or HTML by injecting a special payload via the title parameter in the frontend contribution form.

A vulnerability in the VPN web client services component of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users. The issue is due to improper validation of input passed to the component before being returned to the browser. An attacker could exploit this by persuading a user to visit a website that sends malicious requests to an affected device with VPN web services enabled.

A vulnerability in Simcenter STAR-CCM+ exposes user, host, and display names when the Power-on-Demand public license server is used. An attacker can remotely retrieve this information.

A Cross-site scripting (XSS) vulnerability in the JSON search parse and response in eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_products?search parameter.

Wykryto podatność typu Denial-of-Service w produktach F-Secure Atlant oraz niektórych produktach WithSecure, która może prowadzić do awarii silnika skanującego podczas analizy zniekształconych plików PE32-bit. Atakujący może zdalnie wywołać ten błąd.

In Moodle before versions 3.8.2, 3.7.5, 3.6.9, and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.