CVE Vulnerability Catalog

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.

In version 3.9.4 of rconfig, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the path_b parameter of the doDiff function in /classes/compareClass.php. This allows authenticated attackers to make arbitrary requests by injecting crafted URLs.

Greenshot version 1.2.10 and below allows arbitrary code execution due to insecure deserialization of .NET content when a .greenshot file is opened.

In pnpm, a package manager, it is possible to construct a tarball that appears safe when installed via npm but is malicious when installed via pnpm. This can lead to a safe package from npm being replaced with a malicious version when using pnpm.

LavaLite CMS version 9.0.0 is vulnerable to Sensitive Data Exposure.

LavaLite CMS version 9.0.0 is vulnerable to Sensitive Data Exposure.

There is an OS Command Injection vulnerability in the GitHub repository mlflow/mlflow prior to version 2.6.0.

The Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.

HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

KEPServerEX versions 6.0 to 6.14.263 are vulnerable to an attack that can lead to uncontrolled resource consumption by reading a recursively defined object. The OPC UA protocol used by KEPServerEX does not check if an object is recursively defined, which can lead to stack overflow and device crash.

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.

A use-after-free flaw was found in the Linux kernel's netfilter related to triggering the nft_pipapo_remove function without the NFT_SET_EXT_KEY_END element. This could lead to system crashes or privilege escalation by a local user.

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning.

In Zimbra Collaboration (ZCS) versions 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, there is a risk of exposure of internal JSP and XML files.

A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process.

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.

The httpd in the ASUS RT-AX88U device is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request that causes the httpd binary to crash in the 'do_json_decode()' function, resulting in a DoS condition.

The httpd software in the ASUS RT-AX88U router is vulnerable to an unauthenticated DoS attack. A remote attacker can send a specially crafted request, causing the httpd binary to crash during a string comparison.

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CVE-2023-37219 concerns improper neutralization of formula elements in a CSV file in Tadiran Telecom Composit. This may lead to unauthorized code execution or data manipulation.