CVE Vulnerability Catalog

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. The vulnerability enables unauthorized access to resources outside the intended scope.

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. The manipulation of the argument user_id leads to missing authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A use-after-free flaw was found in GPAC up to f1219cde in the gf_list_count function of utils/list.c, used by the MP4Box component. The attack requires local access and a public exploit is already available. The issue is fixed in version abi-16.23 (patch 49dee5cad329cfed310c1682703df7daa47df31a).

A heap-based buffer overflow was detected in GPAC up to f1219cde in the gf_node_get_field function of scenegraph/base_scenegraph.c, used by the MP4Box component. The attack requires local access and a public exploit is already available. The issue is fixed in version abi-16.23 (patch 49dee5cad329cfed310c1682703df7daa47df31a).

A security vulnerability has been detected in GPAC up to f1219cde in the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of the MP4Box component. The manipulation leads to a null pointer dereference, and the attack can only be performed from a local environment.

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. The relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content.

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.

In LibreNMS 1.65, a remote authenticated attacker with normal privileges can extract all information from the LibreNMS database via SQL injection in the searchPhrase parameter in the /ajax_table.php API endpoint. This affects multiple files in includes/html/table, including as-selection.inc.php, edit-ports.inc.php, alertlog-stats.inc.php, alerts.inc.php, eventlog.inc.php, inventory.inc.php, ix-list.inc.php, ix-peers.inc.php, mempool-edit.inc.php, mempool.inc.php, poll-log.inc.php, processor-edit.inc.php, processor.inc.php, routing-edit.inc.php, sensors-common.inc.php, storage-edit.inc.php, storage.inc.php, and toner.inc.php.

A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the Login Success Handler component. Manipulation of the argument geopluginURL causes deserialization, and the attack can be initiated remotely.

A SQL injection vulnerability was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown function of /pages/emp_transac.php?action=add. Manipulation of the firstname argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability was identified in GPAC up to f1219cde in the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the MP4Box component. The manipulation leads to a null pointer dereference, and local access is required to approach this attack.

A vulnerability was determined in davenardella snap7 up to 1.4.3 in the TSnap7MicroClient::opUpload function of src/core/s7_micro_client.cpp. Manipulation of the DataLen argument can lead to memory corruption. The attack can be executed remotely and the exploit has been publicly disclosed. The project was informed but has not responded.

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0 in the function AdminGoodsService.validate of litemall-vue/src/views/items/detail/index.vue of the Product Detail component. Manipulation of the detail argument leads to cross site scripting and the attack may be launched remotely. The project was informed early but has not responded yet.

A flaw was found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0 in the function AdminTopicController.validate of litemall-vue/src/views/items/topic/index.vue of the Admin Topic Handler component. Manipulation causes cross site scripting and the attack may be initiated remotely. The project was informed early but has not responded yet.

A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2 in the function BlogSortServiceImpl.addBlogSort of mogu_web/src/main/resources/templates/info.ftl of the blogSort Endpoint component. Manipulation of the sortName argument results in cross site scripting and the attack can be launched remotely. The project was informed early but has not responded yet.

A security vulnerability was detected in quequnlong shiyi-blog up to 1.2.1 in the function highlightKeyword of blog-web/src/components/Search/index.vue of the Search component. Manipulation of the title/summary argument leads to cross site scripting and the attack can be initiated remotely. The project was informed early through an issue report.

A weakness has been identified in Rizwan17 inventory-management-system in the createUserAccount function of register.php. Manipulation of the usertype argument leads to improper authorization, allowing remote attacks. The exploit has been publicly disclosed and may be used.

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.