CVE Vulnerability Catalog

CVE-2023-33012 describes a command injection vulnerability in the configuration parser of Zyxel ATP and USG FLEX firmware. An unauthenticated, LAN-based attacker could execute OS commands using a crafted GRE configuration when cloud management mode is enabled.

A format string vulnerability in the Zyxel ATP, USG FLEX, USG20(W)-VPN, and VPN series firmware could allow an unauthenticated, LAN-based attacker to execute OS commands using a crafted PPPoE configuration when cloud management mode is enabled.

Hamba avro is a Go language encoder/decoder implementation of the avro codec specification. In affected versions, a well-crafted string passed to `github.com/hamba/avro/v2.Unmarshal()` can throw a `fatal error: runtime: out of memory`, leading to denial of service for the avro consumer.

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in the RebootSystem function of the file lib/cste_modules/system, which can reboot the system.

The Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection, allowing a network attacker to intercept the WebSockets connection.

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address.

CVE-2023-2959 is a vulnerability in Oliva Expertise EKS that allows authentication bypass due to a primary weakness before version 1.2. This enables the collection of user-provided data without proper authorization.

A critical vulnerability was found in SourceCodester Life Insurance Management System version 1.0. Manipulation of the 'username' argument in the login.php file leads to SQL injection, which can be initiated remotely.

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application.

In the GitHub repository admidio/admidio prior to version 4.2.10, there is a vulnerability allowing unrestricted upload of files with dangerous types.

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects version 0.6.26.

Rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.

A vulnerability has been identified in Weave GitOps Terraform Controller that could allow an authenticated remote attacker to view sensitive information. The issue stems from the inadvertent printing of sensitive data in pod logs by the `tf-runner`.

The zenstruck/collections library has a vulnerability that allows code execution by passing _callable strings_, such as `system`. This can lead to a limited subset of specific user input being executed as code.

Knowage is an open source suite for business analytics that improperly processes user data, potentially leading to SQL injection. An attacker can craft specially designed HQL queries that affect the SQL queries generated by the Hibernate engine.

The OpenIDC/cjose library has a bug in the AES GCM decryption routine that incorrectly uses the Tag length from the actual Authentication Tag. This allows an attacker to provide a truncated Authentication Tag and modify the JWE.

An out-of-bounds write vulnerability in Bitdefender Engines on Windows causes the engine to crash. This issue affects Bitdefender Engines version 7.94791 and lower.

The cryptography package before version 41.0.2 for Python mishandles SSH certificates that have critical options.

Copyparty is a portable file server that is vulnerable to a path traversal attack in the `.cpr` subfolder in versions prior to 1.8.2. This attack allows access to files, directories, and commands outside the web document root directory.

A vulnerability in Microsoft Edge (Chromium-based) allows for remote code execution. Exploiting this flaw could lead to full control over the user's system.