CVE Vulnerability Catalog

Envoy is an open source edge and service proxy that prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12 had an issue with case sensitivity in HTTP/2 schemes. This could lead to the rejection of requests with mixed-case schemes or the bypassing of some requests in unencrypted connections.

In Envoy, prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client can construct credentials with permanent validity in specific scenarios. This issue arises from rare situations where the HMAC payload can always be considered valid in the OAuth2 filter's check.

Strapi, an open-source content management system, prior to version 4.10.8, allows leaking private fields when using the `t(number)` prefix. Changing the prefix in Knex queries can expose protected data such as admin passwords.

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack.

The Balkon plugin versions up to 1.3.2 contain a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

The teachPress plugin versions up to 9.0.2 contain an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

The wpxpo PostX – Gutenberg Post Grid Blocks plugin versions <= 2.9.9 contains an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

The Five Star Restaurant Reservations plugin versions <= 2.6.7 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage.

The Recent Posts Slider plugin by Neha Goel in versions <= 1.1 has an unauthenticated stored Cross-Site Scripting (XSS) vulnerability.

The PluginForage WooCommerce Product Categories Selection Widget plugin versions <= 2.0 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

A vulnerability related to the deserialization of untrusted data in Apache InLong allows an attacker to bypass current logic and achieve arbitrary file reading. This affects versions from 1.4.0 to 1.7.0.

The vulnerability in Infodrom's E-Invoice Approval System involves storing passwords in plaintext, allowing sensitive strings to be read within an executable.

A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0, affecting unknown processing of the file /admin/index.php. Manipulation of the argument username leads to SQL injection.

A vulnerability exists that allows low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality. This allows a local user to generate a malicious networking packet, potentially leading to system crashes or privilege escalation.

A flaw in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory allows unauthorized memory access. Despite the 'Randomize per-cpu entry area' feature implemented in /arch/x86/mm/cpu_entry_area.c (based on CVE-2023-0597), there is still a risk of per-cpu entry area leaks. A local user may guess the location of exception stacks or other important data, potentially leading to privilege escalation.

A use-after-free flaw was found in vcs_read in vc_screen.c in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

A flaw was found in Keylime that allows for a remote denial of service attack against its SSL connections. An attacker can exhaust all available connections.