CVE Vulnerability Catalog

In CKEditor 4 before 4.16, it was possible to execute a ReDoS-type attack by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

A cross-site scripting (XSS) vulnerability exists in the Add Patient Form of QDOCS Smart Hospital Management System 3.1. A remote attacker can inject arbitrary JavaScript code via fields such as Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies.

Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter, allowing an attacker to inject malicious scripts. This can lead to session theft or user redirection.

A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in the SetHomePage() function in app/Controller/UserSettingsController.php. Due to a lack of controller validation in the 'path' parameter, an attacker can execute malicious JavaScript code.

Serwer API Kubernetes we wszystkich wersjach pozwala atakującemu, który potrafi stworzyć usługę ClusterIP i ustawić pole spec.externalIPs, na przechwycenie ruchu do tego adresu IP. Dodatkowo, atakujący, który ma możliwość modyfikacji statusu usługi LoadBalancer, może ustawić status.loadBalancer.ingress.ip w podobny sposób.

A vulnerability in the STM32 cryptographic firmware library (UM1924) allows a Bleichenbacher attack on PKCS #1 v1.5 padding for RSA. An attacker can remotely decrypt encrypted ciphertext by making successive queries to the server using the vulnerable library.

The Stockdio Historical Chart plugin for WordPress before version 2.8.1 is vulnerable to Cross-Site Scripting (XSS). The stockdio_eventer function listens for postMessage events without validating the origin, allowing an attacker to execute arbitrary JavaScript in the victim's browser.

MISP version 2.4.136 has an XSS vulnerability that can be exploited via a crafted URL to the user homepage favourite button in app/View/Elements/global_menu.ctp.

MISP version 2.4.136 has an XSS vulnerability via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs.

MISP version 2.4.136 has a Stored XSS vulnerability in the galaxy cluster view that can be exploited via a cluster name in app/View/GalaxyClusters/view.ctp.

A Bleichenbacher vulnerability in the PKCS #1 v1.5 padding implementation for RSA in Microchip Libraries for Applications (versions up to 2018-11-26) allows an attacker to decrypt encrypted ciphertext by making successive queries to the server, resulting in remote information disclosure.

Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59, and 7.0.0 to 7.0.106 are susceptible to JSP source code disclosure in some configurations when serving resources from a network location on the NTFS file system. The root cause is the unexpected behavior of the JRE API File.getCanonicalPath(), caused by inconsistent behavior of the Windows API (FindFirstFileW).

A vulnerability in the Snort application detection engine of multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies. The issue is due to a flaw in the detection algorithm. An attacker could send crafted packets through an affected system, potentially bypassing policies and delivering a malicious payload.

A vulnerability with TCP Fast Open (TFO) when used with the Snort detection engine in multiple Cisco products could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The issue is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could send crafted TFO packets with an HTTP payload through an affected device, potentially bypassing the policy and delivering a malicious payload.

By attempting to connect to a website using an unresponsive port, an attacker could control the content of a tab while the URL bar displayed the original domain. Affects Firefox for Android < 84.

A malicious app on the user's device could broadcast an Intent to Firefox for Android with arbitrary headers, leading to attacks such as abusing ambient authority or session fixation. This was fixed by only allowing certain safe-listed headers. Affects Firefox < 84.

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 router. The flaw exists in the Time and Date module (NTP server name field) and URL Filter (Keyword field).

A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.

Atakujący może wysłać specjalnie przygotowaną wiadomość do Crimson 3.1 (wersje kompilacji przed 3119.001), co może prowadzić do wycieku dowolnych lokalizacji pamięci.

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.