CVE Vulnerability Catalog

SmarterTrack 7922 zawiera podatność na ujawnienie informacji w formularzu wyszukiwania zarządzania czatem, która ujawnia szczegóły identyfikacyjne agentów. Atakujący mogą uzyskać dostęp do podatnego punktu końcowego /Management/Chat/frmChatSearch.aspx, aby pobrać imiona i nazwiska agentów oraz ich unikalne identyfikatory.

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and therefore can be bypassed when the extension uses alternate casing (for example .BAT, .Bat, etc.). This vulnerability is fixed in 2.5.6.

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. This vulnerability is fixed in 2.6.0.

A stored cross-site scripting (XSS) vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow, the injected payload executes in the administrator’s browser context, allowing privilege escalation, including creation of new administrator accounts, session token theft, and execution of administrative actions.

A stored cross-site scripting (XSS) vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected payload is persisted and executed when other users view the affected profile page, potentially allowing session token theft, phishing attacks, or malicious redirects. Exploitation requires an authenticated account and user interaction to view the crafted profile.

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.

An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX Series device configured for DNS processing receives a specifically formatted DNS request, flowd will crash and restart, which causes a service interruption until the process has recovered. This issue affects Junos OS on SRX Series: 23.4 versions before 23.4R2-S5, 24.2 versions before 24.2R2-S1, 24.4 versions before 24.4R2. This issue does not affect Junos OS versions before 23.4R1.

A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of packets is encountered, a double free happens. This causes flowd to crash and the respective FPC to restart. This issue affects Junos OS on SRX and MX Series: all versions before 22.4R3-S7, 23.2 versions before 23.2R2-S3, 23.4 versions before 23.4R2-S4, 24.2 versions before 24.2R2.

A vulnerability in the Web-Filtering module of Junos OS on SRX Series allows an unauthenticated network-based attacker to cause a Denial-of-Service (DoS). A specially crafted SSL packet causes an FPC crash and restart.

The GTP plugin in Junos OS on SRX Series contains an Improper Locking vulnerability. An unauthenticated network-based attacker can send a specially crafted GTP Modify Bearer Request message, causing a lock to be acquired and never released, leading to a watchdog timeout and FPC crash and restart.

A vulnerability in Juniper Junos OS on EX4000 models with 48 ports (EX4000-48T, EX4000-48P, EX4000-48MP) allows an unauthenticated network-based attacker to cause an FXPC crash and restart by sending a high volume of traffic to the device. This leads to a complete service outage until the device automatically restarts.

A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved. An authenticated, network-adjacent attacker can flap a port to crash the dot1xd process, leading to a Denial of Service (DoS), or potentially execute arbitrary code as root. The issue occurs during processing of a change of authorization (CoA) when a port bounce happens, where a freed pointer is later referenced.

A vulnerability in the packet forwarding engine (PFE) of Junos OS on SRX Series allows an unauthenticated network-based attacker to send a specific ICMP packet through a GRE tunnel, causing the PFE to crash and restart. The issue occurs when PowerMode IPsec (PMI) and GRE performance acceleration are enabled, leading to traffic loss.

A vulnerability in Junos OS on SRX and MX devices with MX-SPC3 or MS-MPC service cards causes an infinite loop in the flow management process (flowd or mspmand) after receiving specific SIP messages over TCP. An unauthenticated attacker can send multiple such messages, leading to watchdog timer expiration and process crash, resulting in a Denial of Service (DoS). The issue only occurs over TCP, not UDP.

A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL expressions.

A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives a BGP update with a set of specific optional transitive attributes over an established peering session, rpd will crash and restart when attempting to advertise the received information to another peer.

A vulnerability in the DHCP service (jdhcpd) of Junos OS and Junos OS Evolved allows a DHCP client in one subnet to exhaust the address pools of other subnets, leading to a Denial of Service (DoS) on the downstream DHCP server. The issue arises from improper handling of DHCP DISCOVER packets with Option 82 in 'forward-only' mode, which are forwarded unmodified instead of being dropped, consuming addresses from the pool.

Easy!Appointments to samodzielnie hostowany harmonogram spotkań. W wersji 1.5.2 i wcześniejszych, funkcja csrf_verify() w pliku EA_Security.php egzekwuje ochronę przed CSRF tylko dla żądań POST, co pozwala na ataki CSRF poprzez wymuszenie na przeglądarce ofiary wysłania spreparowanego żądania GET.

H3 to minimalny framework H(TTP) zaprojektowany z myślą o wysokiej wydajności i przenośności. Przed wersją 1.15.5 występowała krytyczna podatność na smuggling żądań HTTP, związana z niewłaściwą obsługą nagłówka Transfer-Encoding, który powinien być traktowany jako niewrażliwy na wielkość liter.

NanoMQ w wersji 0.22.7 jest podatny na atak typu Denial of Service (DoS) z powodu niewłaściwego ograniczania zasobów. Odpowiednio skonstruowana sekwencja żądań powoduje nasycenie kolejki recv-q, co prowadzi do szybkiego wyczerpania deskryptorów plików systemowych.