CVE Vulnerability Catalog

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

There is a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally.

The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to and including 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This allows authenticated attackers with minimal permissions, such as a subscriber, to modify their user role.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS, which can remotely crash any Fast DDS process.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.11.1, 2.10.2, 2.9.2, and 2.6.6, malformed `PID_PROPERTY_LIST` parameters can cause heap overflow at a different program counter, potentially crashing any Fast-DDS process remotely.

eprosima Fast DDS prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 is vulnerable to heap overflow caused by the PID_PROPERTY_LIST parameter containing a CDR string longer than the actual content size. This vulnerability can lead to remote crashes of any Fast-DDS process.

In eprosima Fast DDS, prior to versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5, a vulnerability exists that raises an unhandled `BadParamException` in fastcdr, leading to a crash of fastdds.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure, crashing FastDDS.

A SQL Injection vulnerability was found in the extension script in PostgreSQL when using @extowner@, @extschema@, or @extschema:...@ inside a quoting construct. An attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

A blind SQL injection vulnerability exists in Snow Software license manager versions from 8.0.0 to 9.30.1 on Windows. A logged-in user with high privileges can inject SQL commands via the web portal.

CVE-2023-39553 describes an improper input validation vulnerability in Apache Airflow Drill Provider that allows an attacker to pass malicious parameters when establishing a connection with DrillHook, enabling file reading on the Airflow server.

Versions of Genians Genian NAC and Genian ZTNA have a vulnerability that allows code download without integrity check, enabling malicious software updates.

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, various XML functions rely on libxml global state to track configuration variables. This state can be altered by other modules, leading to the potential loading of external XML entities and disclosure of local files accessible to PHP.

A race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

A vulnerability has been identified within Serv-U 15.4 that allows bypassing multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action.

HAProxy versions from 2.0.32 to 2.6.14 and from 2.7.0 to 2.8.1 forward empty Content-Length headers, violating RFC 9110 section 8.6. In rare cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.

In version 1.4.3 of the 1Panel, there is an arbitrary file write vulnerability that could lead to direct control of the server. The issue arises from a lack of parameter filtering in the `SaveContent` function in the `api/v1/file.go` file.

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, there is a vulnerability that allows an attacker to read arbitrary important configuration files on the server due to unfiltered request parameters.