CVE Vulnerability Catalog

A vulnerability in Oracle REST Data Services (Graph QL component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data accessible through Oracle REST Data Services.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with HTTP network access, requiring user interaction, to create, delete or modify critical data and read a subset of data, potentially impacting additional products.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update, insert or delete operations and read a subset of data.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data.

A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can perform unauthorized update, insert or delete operations on data accessible through Oracle REST Data Services.

A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file.

A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected or returned object pointer before dereferencing fixed fields during post-processing.

The parser in the PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. This may lead to an out-of-bounds write.

JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only JavaScript-escaped in HtmlCounterReport, to execute script in victims' browsers.

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious 'k' values that are echoed unsanitized, executing JavaScript in victims' browsers.

DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag and inject JavaScript, which executes in the victim's browser.

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and malicious msg values to execute script and steal session cookies.

K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to /wp-content/plugins/knews/wysiwyg/fontpicker/index.php with malicious 'ff' values echoed into option tags to execute script and steal session cookies.

The Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability. An unauthenticated attacker can inject scripts through the unsanitized 'key' parameter in iframe.php by sending a crafted GET request.

When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash.

When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not validate that the server's challenge was valid base64. A malicious server could send a challenge causing Thunderbird to include uninitialized heap memory in its NTLM response, disclosing it to the server; a challenge consisting only of base64 padding caused an out-of-bounds read and crash.