CVE Vulnerability Catalog

Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with permission to perform POST requests on the /api/v1/alerts endpoint could execute arbitrary JavaScript code on users of Prometheus Alertmanager.

Rizin is a reverse engineering framework that is vulnerable to integer overflow in the `consume_count` function in versions 0.6.0 and prior. The issue arises from a missing overflow check, leading to calculation errors.

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery, allowing an attacker to port scan internal hosts and request information from them.

Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition.

CasaOS is an open-source personal cloud system. Prior to version 0.4.4, an authenticated user who successfully connects to a controlled SMB server can execute arbitrary commands.

A mass assignment vulnerability was found in Netmaker, which creates networks with WireGuard, in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user.

In Netmaker, which creates networks with WireGuard, an Insecure Direct Object Reference (IDOR) vulnerability was found in the user update function in versions prior to 0.17.1 and 0.18.6. It allows updating another user's password by specifying their username.

In Netmaker, prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage was found, allowing unauth users to interact with DNS API endpoints. The issue is patched in versions 0.17.1 and 0.18.6.

A remote unprivileged attacker can send multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

The built-in web server of SNAP PAC S1 Firmware version R10.3b does not require setting a complex password, which could allow for a successful brute force attack if users do not configure complex credentials.

The web server for SNAP PAC S1 Firmware version R10.3b has no limit on the number of login attempts. This could allow for a brute-force attack on the built-in web server login.

A vulnerability related to inadequate encryption strength has been reported to affect QNAP operating systems. If exploited, local network clients may decrypt data using brute force attacks via unspecified vectors.

The vulnerability in CP-Plus NVR is due to improper input handling at the web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

In versions 4.7.0 and prior of the ETIC Telecom RAS web management portal, authentication is disabled by default. This could allow an attacker with adjacent network access to alter the device's configuration or cause a denial-of-service condition.

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some API routes of the management web server. This could allow an attacker to download and export sensitive data.

Craft is a content management system (CMS) for creating custom digital experiences. Bypassing the validatePath function can lead to remote code execution, posing a risk of malicious control over vulnerable systems.

The session fixation vulnerability allowed authenticated users to continue accessing the Airflow webserver even after their password was reset by the admin, until the user's session expired. The fix implemented invalidates existing user sessions when the password is reset, when using the database session backend.

Apache Airflow, in versions prior to 2.7.0, contains a vulnerability that can be exploited by an authenticated user with Connection edit privileges. This allows access to connection information and the exploitation of the test connection feature, potentially leading to a denial of service (DoS) condition on the server.

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration.