CVE Vulnerability Catalog

Podatność CVE-2023-49827 dotyczy motywu WordPress Soledad, który ma problem z niewłaściwą neutralizacją danych wejściowych podczas generowania stron internetowych, co prowadzi do podatności na ataki typu Cross-site Scripting (XSS). Problem ten występuje w wersjach od n/a do 8.4.1.

Podatność CVE-2023-49740 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w Seraphinite Accelerator, co prowadzi do ataków typu Reflected XSS. Problem ten dotyczy wersji od n/a do 2.20.28.

Podatność CVE-2022-45365 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w aplikacji Stock Ticker, co prowadzi do możliwości ataku typu Cross-site Scripting (XSS). Problem ten dotyczy wersji Stock Ticker od n/a do 3.23.2.

Silverpeas Core 6.3.1 is vulnerable to Cross-Site Request Forgery (CSRF) via the Domain SQL Create function. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.

The 'userModify' feature in Silverpeas Core 6.3.1 is vulnerable to Cross-Site Request Forgery (CSRF) leading to privilege escalation. If an administrator visits a malicious URL while authenticated, the attacker can become an administrator user.

Silverpeas Core 6.3.1 and below contain an incorrect access control vulnerability. An attacker with low privileges can execute the administrator-only function of enabling maintenance mode, making the application unavailable to all users.

A flaw was found in xorg-server that can be triggered by a specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty. This may lead to an integer overflow, potentially resulting in the disclosure of sensitive information.

A flaw was found in xorg-server that allows for out-of-bounds memory reads and writes when querying or changing XKB button actions, such as moving from a touchpad to a mouse. This may lead to local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

In Undertow, a flaw was found where when an AJP request exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing the TCP connection to close without returning an AJP response. This can allow a malicious user to repeatedly send requests exceeding max-header-size, causing a Denial of Service (DoS).

Podatność CVE-2023-48677 dotyczy lokalnego podwyższania uprawnień z powodu ataku typu DLL hijacking. Dotyczy to produktów Acronis Cyber Protect Home Office, Acronis Cyber Protect Cloud Agent, Acronis Cyber Protect 16 oraz Acronis True Image OEM w wersjach przed określonymi buildami.

W Quarkus znaleziono lukę, która występuje podczas odbierania żądania przez websocket bez określonych uprawnień opartych na rolach dla operacji GraphQL. Mimo zabezpieczeń punktu końcowego, Quarkus przetwarza żądanie bez uwierzytelnienia.

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This could allow a local attacker to crash the system or leak internal kernel information.

A vulnerability in the configuration functionality of the BMC (IPMI) on Supermicro X11 and M11 devices with firmware up to version 3.17.02 allows remote authenticated users to execute arbitrary commands.

A vulnerability in the web interface of the BMC (IPMI) on Supermicro X11 and M11 devices with firmware versions before 3.17.02 allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable CGI endpoints.

A web server in the BMC (IPMI) implementation on Supermicro X11 and M11 devices with firmware up to 3.17.02 allows remote unauthenticated attackers to perform directory traversal, potentially disclosing sensitive information.

Podatność typu Server-Side Request Forgery (SSRF) w szablonach Brainstorm Force Starter Templates — Elementor, WordPress i Beaver Builder. Problem ten dotyczy szablonów Starter Templates — Elementor, WordPress i Beaver Builder w wersjach od n/a do 3.2.4.

Podatność typu Server-Side Request Forgery (SSRF) w Paytm Payment Gateway, która dotyczy wersji od n/a do 2.7.0. Umożliwia atakującym wysyłanie złośliwych żądań z serwera.

A vulnerability in the craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications by leaking the channel access token (via captured network traffic).