CVE Vulnerability Catalog

An information disclosure vulnerability in the HTTP.sys component of Windows. Technical details are not provided in the description.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

SAP NetWeaver AS ABAP (BSP Framework) versions 700–757 do not sufficiently sanitize input, allowing an unauthenticated user to alter the current user session by injecting malicious code over the network and gain access to unintended data. This may have a limited impact on confidentiality and integrity.

SAP Solution Manager (BSP Application) version 720 allows an authenticated attacker to craft a malicious link that, when clicked by an unsuspecting user, can be used to read or modify sensitive information or craft a payload that may restrict access to resources.

The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some shortcode attributes before outputting them, allowing users with contributor role and above to perform Stored Cross-Site Scripting attacks.

In the Comfast CF-WR6110N router version V2.3.1, an incorrect access control vulnerability was found. A remote attacker on the same network can send any HTTP request to an unauthenticated page, forcing the server to generate a SESSION_ID. Using this SESSION_ID, the attacker can then perform authenticated requests.

Dell Command | Intel vPro Out of Band versions before 4.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability, leading to arbitrary folder deletion.

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access memory address information via logs.

The High Availability functionality in Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint using path traversal characters. The vulnerability is associated with PlatformReplicationManager.Java and affects YugabyteDB Anywhere from 2.0.0.0 through 2.13.0.0.

A SQL injection vulnerability was found in glorylion JFinalOA 1.0.2 in the file SysOrg.java via manipulation of the id argument. The attack can be initiated remotely and the exploit has been publicly disclosed.

The formula library (a math and string formula parser) in versions prior to 3.0.1 does not limit processing time for crafted input strings, potentially leading to polynomial execution time and denial of service.

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.

Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. Chromium rates the severity as Low.

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page.

The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some shortcode attributes before outputting them, allowing users with contributor role and above to perform Stored Cross-Site Scripting attacks.

A critical vulnerability was found in GNU C Library 2.38 affecting the __monstartup function in gmon.c of the Call Graph Monitor component. The manipulation leads to a buffer overflow. Applying a patch is recommended. However, the real existence of this vulnerability is still doubted; the inputs that induce it are basically addresses of the running application built with gmon enabled, i.e., trusted input or input that needs an actual security flaw to be compromised.