CVE Vulnerability Catalog

Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file reads on any file accessible to the RabbitMQ process.

Use after free in DOM in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Heap buffer overflow in the Chromecast component of Google Chrome on Android, Linux, and ChromeOS prior to 148.0.7778.179 allows a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. Severity is medium.

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use-after-free vulnerability in the WebRTC component in Google Chrome prior to 148.0.7778.179. A remote attacker can execute arbitrary code via a crafted HTML page.

Google Chrome prior to 148.0.7778.179 has a heap buffer overflow in WebRTC that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Type Confusion in the GFX component in Google Chrome on Linux and ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)

Google Chrome prior to version 148.0.7778.179 contains a use-after-free vulnerability in the QUIC component, allowing a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic.

A use-after-free vulnerability in the GPU component of Google Chrome on Windows prior to version 148.0.7778.179 was discovered. A remote attacker can exploit a crafted HTML page to execute arbitrary code within a sandbox.

A critical Use-After-Free vulnerability in the WebRTC component of Google Chrome on Linux prior to version 148.0.7778.179 allows a remote attacker to execute arbitrary code via a crafted HTML page.

Local File Inclusion (LFI) vulnerability in Yii 2 (versions up to 2.0.54). The View::renderPhpFile() function overwrites the internal _file_ variable via extract(), allowing arbitrary file inclusion, potentially leading to RCE or information disclosure.

An arbitrary file read vulnerability via path traversal has been identified in Frappe framework before versions 15.105.0 and 16.15.0. The vulnerability allows an attacker to read files outside the allowed directory.

Trilium Notes versions 0.102.1 and prior, when running in an Electron environment, disables authentication for the Clipper API, allowing unauthenticated attackers on the local network to access API endpoints without password, API token, or CSRF protection. An attacker can scan ports and gain unauthorized access to data, as well as conduct phishing or compromise the local system.

A vulnerability in NVIDIA DGX OS in the factory provisioning process, where cloning a base image causes identical SSH host keys to be deployed across multiple systems. Sharing cryptographic identifiers enables host impersonation or man-in-the-middle attacks. Successful exploitation may lead to code execution, data tampering, privilege escalation, information disclosure, and denial of service.

NVIDIA BioNeMo Core for Linux contains a path traversal vulnerability when loading a malicious file. Successful exploitation could lead to code execution, denial of service, information disclosure, and data tampering.

NVIDIA BioNemo for Linux contains a deserialization of untrusted data vulnerability. A successful attack can lead to code execution, denial of service, information disclosure, and data tampering.

Vulnerability in NVIDIA TensorRT allowing an attacker to cause an out-of-bounds write. Successful exploitation might lead to data tampering.

Vulnerability in Splunk Enterprise (versions below 10.2.2 and 10.0.5) and Splunk Cloud Platform (multiple versions) allows users with access to the _internal index to view session cookies and response bodies containing sensitive data.

The Cost of Goods by PixelYourSite plugin for WordPress up to version 1.2.12 has a Stored Cross-Site Scripting (XSS) vulnerability via the 'csvdata[0][cost_of_goods_value]' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts that execute whenever a user accesses an injected page.