CVE Vulnerability Catalog

An issue in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.

An issue found in LIVRE KEISEI version 13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.

CVE-2023-37415 is a vulnerability related to improper input validation in Apache Airflow Apache Hive Provider. Before version 6.1.2, the proxy_user option can inject a semicolon, posing a security risk.

CVE-2023-35069 describes an improper limitation of a pathname to a restricted directory, allowing Path Traversal in the Bullwark application. This issue affects Bullwark versions before BLW-2016E-960H.

A code injection vulnerability in ELECOM wireless LAN routers allows an authenticated network-adjacent attacker to execute arbitrary code by sending a specially crafted request.

The OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated network-adjacent attacker to execute arbitrary OS commands with root privileges by sending a specially crafted request.

An issue has been discovered in GitLab CE/EE affecting all versions from 10.3 before 15.11.10, all versions from 16.0 before 16.0.6, and all versions from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.

The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to and including 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. This allows authenticated attackers with subscriber-level permissions and above to inject a PHP Object.

CVE-2023-37562 describes a cross-site request forgery (CSRF) vulnerability in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious page while logged in, unintended operations may be performed.

CVE-2023-34133 describes an improper neutralization of special elements used in SQL commands, allowing an unauthenticated attacker to extract sensitive information from the SonicWall GMS and Analytics application database. This issue affects GMS versions 9.3.2-SP1 and earlier, and Analytics versions 2.5.0.4-R7 and earlier.

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 related to infinite loops in recursive entity expansion.

ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page.

A command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows an authenticated network-adjacent attacker to execute arbitrary commands by sending a specially crafted request to the web management page.

The 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse directories and extract arbitrary files using the Zip Slip method, gaining access to the filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

CVE-2023-34127 describes an improper neutralization of special elements used in OS commands, allowing an authenticated attacker to execute arbitrary code with root privileges in SonicWall GMS and SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

In the DMPixelLogger_ProcessDmCommand function of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed.

There is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.

CVE-2023-34123 involves the use of a hard-coded cryptographic key in SonicWall GMS and SonicWall Analytics. This issue affects GMS versions: 9.3.2-SP1 and earlier; Analytics: 2.5.0.4-R7 and earlier.

A critical vulnerability was found in Boss Mini 1.4.0 Build 6221, affecting an unknown part of the file boss/servlet/document. Manipulation of the argument path leads to file inclusion.