CVE Vulnerability Catalog

In Firefox for iOS < 26, the token used for native-to-JS bridging could leak when downloading files, allowing non-app code to call bridging functions.

An issue was discovered in MISP version 2.4.128, where app/Controller/EventsController.php lacks an event ACL check before allowing a user to send an event contact form.

A flaw was found in ActiveMQ Artemis from versions 2.7.0 to 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.

Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying OS and overwrite or read arbitrary files. The attacker would need valid administrative credentials. The issue is due to improper input validation of CLI command arguments. Successful exploitation could allow root shell access and arbitrary file read/write.

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.

An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.

A spoofing vulnerability in Microsoft Power BI Report Server due to improper validation of uploaded attachment content-type. An authenticated attacker can upload a crafted payload, and when opened by a user, execute actions and scripts in the user's security context.

Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.

Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker could run arbitrary code in an elevated context.

Denial of service vulnerability in Connected User Experiences and Telemetry Service due to improper handling of file operations.

Information disclosure vulnerability in Windows Client Server Run-Time Subsystem (CSRSS) due to improper handling of objects in memory. An attacker must be logged on and run a specially crafted application.

A security feature bypass vulnerability in Microsoft Windows Task Scheduler service due to improper verification of client connections over RPC. A man-in-the-middle attacker could send a specially crafted request and run arbitrary code as administrator.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of crafted web requests. An authenticated attacker could perform XSS attacks and run scripts in the security context of the current user.

A cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker could send a malicious request and run script in the context of the current user.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request and execute script in the security context of the current user.