CVE Vulnerability Catalog

Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.5.0+240319 allows a remote attacker to execute arbitrary JavaScript code in the victim's browser. The issue stems from missing input validation and output encoding in the Alert Widget's message component.

A Cross-Site Scripting (XSS) vulnerability was found in LimeSurvey before version 6.5.12+240611. A remote attacker can execute arbitrary code via a crafted script in the title and comment fields.

OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) in the /admin/post/edit/ endpoint. Attackers can inject arbitrary JavaScript code via the Title and Summary fields, leading to arbitrary code execution in the victim's browser.

The WordPress Captcha Plugin by Captcha Bank plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.0.36. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Slim Select versions 2.0 through 2.9.0 are vulnerable to cross-site scripting (XSS). The createOption() function assigns user-provided text to innerHTML without sanitization, allowing attacker-executed JavaScript.

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories from the host into a container during the build process and, in some cases, modify the contents of those mounted files. Even if SELinux is used, this vulnerability can bypass its protection by allowing the source directory to be relabeled to give the container access to host files.

A vulnerability was found in Golang FIPS OpenSSL that allows a malicious user to return an uninitialized buffer length variable with a zeroed buffer in FIPS mode. This may lead to false positive hash comparisons and result in a derived key being all zeros.

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

A vulnerability in Firefox and Thunderbird allows an attacker to determine if an application implementing a specific protocol handler is installed by checking the results of window.open calls with specially set protocol handlers. This affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

A heap buffer overflow vulnerability was discovered in Giflib Project version 5.2.2 via the gif2rgb utility. The issue occurs when processing specially crafted GIF files, potentially leading to program crashes.

In the Linux kernel, the wifi: mt76: mt7921 driver has a NULL pointer access bug in mt7921_ipv6_addr_change, which is called as a notifier when disabling wifi, at which point mvif->phy is already NULL.

In the Linux kernel, the drm/amd/display module lacks a NULL pointer check in dpcd_extend_address_range. This can lead to a crash if kcalloc returns NULL.

Podatność CVE-2024-8608 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w aplikacji ValeApp od Oceanic Software, co pozwala na wystąpienie ataków typu Stored XSS. Problem ten dotyczy wersji ValeApp przed 2.0.0.

A reflected Cross-Site Scripting (XSS) vulnerability was found in Temenos T24 Browser R19.40 in the about.jsp and genrequest.jsp components. An attacker can remotely execute arbitrary JavaScript code via the skin parameter.

Versa Director offers REST APIs for orchestration and management. Some APIs, such as login screen, banner display, and device registration, do not require authentication. It was discovered that for Directors directly connected to the Internet, one of these APIs can be exploited by injecting invalid arguments into a GET request, potentially exposing authentication tokens of other logged-in users. These tokens can then be used to invoke additional APIs on port 9183. This exploit does not disclose usernames or passwords.

Puma is a Ruby/Rack web server. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing an underscore version of the same header (X-Forwarded_For). v6.4.3/v5.6.9 now discard any headers using underscores if the non-underscore version also exists, so proxy-defined headers always win.

Remote code execution vulnerability in Microsoft Edge (Chromium-based). Allows an attacker to execute malicious code on the victim's device.

A vulnerability in Microsoft Edge (Chromium-based) allows remote code execution. An attacker could exploit this flaw to execute arbitrary code on the victim's device.

A Spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate trusted content or interfaces.

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.