CVE Vulnerability Catalog

Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards. An attacker can patch a block field using a specially crafted string to consume excessive resources, possibly leading to Denial of Service.

Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled.

The Email Encoder plugin for WordPress by Jannis Thuemmig in version 2.1.8 and earlier contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

A null pointer dereference flaw exists in the Linux kernel cryptographic scatterwalk API. It occurs when a user constructs a malicious packet with a specific socket configuration, potentially allowing a local user to crash the system or escalate privileges.

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. A remote attacker can send a crafted TCP packet, triggering a heap-based buffer overflow that may leak kmalloc data to the kernel ring buffer (dmesg).

A numeric truncation error vulnerability in Fortinet FortiOS and FortiProxy allows an attacker to cause a denial of service via specifically crafted HTTP requests.

Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

In Symfony from versions 2.0.0, 5.0.0, and 6.0.0 up to 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but do not actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony escapes the output of the affected filters.

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

A Cross-Site Scripting vulnerability in Wonder CMS versions 3.2.0 through 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

A Spoofing vulnerability in Microsoft OneNote allows an attacker to impersonate trusted content or files.

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.

A vulnerability in OpenSSL involves generating or checking excessively long X9.42 DH keys, which may cause very long delays. The DH_generate_key() and DH_check_pub_key() functions do not properly check for excessively large P and Q parameters, which can lead to a Denial of Service when data comes from an untrusted source.

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

A vulnerability exists in Avahi where a reachable assertion occurs in the avahi_alternative_host_name() function. Malformed input can cause the Avahi daemon to abort.

A vulnerability exists in Avahi where a reachable assertion occurs in the avahi_rdata_parse() function. Crafted DNS records can cause the daemon to abort.

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

A vulnerability exists in Avahi where a reachable assertion occurs in the avahi_escape_label() function. Malformed input can cause the daemon to abort.