CVE Vulnerability Catalog

Jinja is an extensible templating engine. It is possible to inject arbitrary HTML attributes into the rendered HTML template via the xmlattr filter, bypassing the auto-escaping mechanism and potentially leading to Cross-Site Scripting (XSS). It may also be possible to bypass blacklist-based attribute validation.

In the Linux kernel, vhost_new_msg in drivers/vhost/vhost.c does not properly initialize memory in messages passed between virtual guests and the host OS. Local privileged users can read some kernel memory contents when reading from the /dev/vhost-net device file.

The POLY1305 MAC implementation in OpenSSL on PowerPC CPUs restores vector register contents in a different order than they were saved, corrupting their contents. The vulnerable code is used only on newer PowerPC processors supporting PowerISA 2.07 instructions. POLY1305 is most commonly used as part of the CHACHA20-POLY1305 AEAD cipher, typically in TLS 1.2 and 1.3.

A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.

A Cross-Site Scripting (XSS) vulnerability was found in NetScout nGeniusOne version 6.3.4. It allows a remote attacker to execute arbitrary code via the 'name' parameter on the Profile and Exclusion List pages.

A Cross-Site Scripting (XSS) vulnerability was found in NetScout nGeniusOne version 6.3.4. It allows a remote attacker to execute arbitrary code via the 'creator' parameter on the Alert Configuration page.

A use-after-free vulnerability in the io_uring mechanism related to Unix SCM garbage collection. It can lead to kernel memory corruption. It requires local access to the system.

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

A vulnerability in httparty before version 0.21.0 allows an attacker to manipulate filenames during multipart/form-data uploads. A remote, unauthenticated attacker can provide a crafted filename parameter, leading to the writing of attacker-controlled filenames.

Cross-site scripting vulnerability in govuk_tech_docs versions 2.0.2 through before 3.3.1. Malicious JavaScript may be executed in the user's browser when a crafted search result is displayed.

Stored XSS vulnerability in TinyMCE before version 5.6.0. An unauthenticated remote attacker can inject crafted HTML into the editor, leading to arbitrary JavaScript execution in another user's browser.

An XSS vulnerability in TinyMCE before version 5.10.0 allows a remote, unauthenticated attacker to inject malicious JavaScript via crafted image or link URLs. The code executes in the browser of a user editing content.

Stored XSS vulnerability in TinyMCE before version 5.9.0. An unauthenticated remote attacker can inject crafted HTML into the editor, leading to arbitrary JavaScript execution in another user's browser.

Mattermost fails to scope the WebSocket response about notified users to each user separately. As a result, the WebSocket broadcasts information about who was notified about a post to everyone else in the channel.

Mattermost fails to properly verify permissions for viewing archived public channels. A member of one team can obtain details about another team's archived public channels via the GET /api/v4/teams/<team-id>/channels/deleted endpoint.

The GroovyEngine.execute component in jline-groovy v3.24.1 contains an issue that allows attackers to cause an Out of Memory (OOM) error.

A critical vulnerability was found in SQLite up to 3.43.0 in the sessionReadRecord function of ext/session/sqlite3session.c. The manipulation leads to a heap-based buffer overflow. Applying a patch is recommended.

A cross-site scripting (XSS) vulnerability exists in the admin_ Video.php component of SeaCMS v12.8. It allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Postfix through 3.8.5 is vulnerable to SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of SPF protection. This occurs because Postfix supports <LF>.<CR><LF> while some other popular e-mail servers do not.