CVE Vulnerability Catalog

In Google Chrome prior to version 115.0.5790.98, an out of bounds memory access in Mojo allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use after free in Diagnostics in Google Chrome on ChromeOS prior to version 115.0.5790.131 allows an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

Use after free in Tab Groups in Google Chrome prior to version 115.0.5790.98 allows a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.

Use after free in Splitscreen in Google Chrome on ChromeOS prior to version 115.0.5790.131 allows a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.

Use after free in WebRTC in Google Chrome prior to version 115.0.5790.98 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A use after free vulnerability in WebRTC in Google Chrome prior to version 115.0.5790.98 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The fwctl driver implements a state machine executed when a bhyve guest accesses certain x86 I/O ports. A bug in the state machine can lead to a buffer overflow when copying a string, which can be exploited by malicious software running in a guest VM.

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

An issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to execute arbitrary code via the com.viatom.baselib.mvvm.webWebViewActivity component.

In PHP Jabbers Time Slots Booking Calendar version 3.3, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts.

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation allows execution of arbitrary commands on the underlying operating system as a privileged user.

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file.

Stack-based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP protocol in EZVIZ products allow an unauthenticated attacker on the same local network to achieve remote code execution.

Two stack buffer overflows in the netClientSetWlanCfg function of the EZVIZ SDK command server were found in certain EZVIZ products. An authenticated attacker on the same local network as the camera can achieve remote code execution.

CVE-2023-4055 affects the Firefox browser, where exceeding the number of cookies per domain leads to inconsistencies in the sent cookies. As a result, some requests may be sent with missing cookies.

The vulnerability allows a website to obscure the full screen notification using the file open dialog, potentially leading to user confusion and possible spoofing attacks.

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This could lead to a crash that potentially allows for a sandbox escape.

An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.