CVE Vulnerability Catalog

Vulnerability related to incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect system availability.

An Out-of-bounds Read vulnerability exists in the GitHub repository gpac/gpac prior to version 2.2.2.

Fides is an open-source privacy engineering platform with a path traversal vulnerability in versions below 2.15.1. This allows remote attackers to access arbitrary files on the Fides webserver container's filesystem.

Uptime Kuma, a monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Although the plugin installation feature is currently disabled in the web interface, the corresponding API endpoints are still available after login.

Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31 authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality.

Kiwi TCMS, a test management system, had an issue with incorrect Nginx configuration that allowed potentially dangerous scripts to be executed from attachments. Versions prior to 12.5 improperly handled the `Content-Type: text/plain` header, posing a risk to users.

GLPI, an IT asset management software, is vulnerable to SQL injection in the Computer Virtual Machine form and inventory request. This issue affects versions from 0.80 up to but not including 10.0.8, with a patch available in version 10.0.8.

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file allows an unauthenticated user to access dashboards data.

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a file accessible by an authenticated user allows a threat actor to interact, modify, or see Dashboard data.

Loxone Miniserver Go Gen.2 versions up to 14.0.3.28 allow an authenticated operating system user to escalate privileges via the Sudo configuration. This enables elevated execution of binaries without a password requirement.

The root password of the Loxone Miniserver Go Gen.2 before version 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before version 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.

GLPI is a free asset and IT management software package. In versions 10.0.0 to 10.0.7, the GLPI inventory endpoint can be exploited for a SQL injection attack as it does not require authentication by default.

A vulnerability in the Linux kernel related to nftables allows for out-of-bounds read and write when vm register contents are poorly handled in the context of CAP_NET_ADMIN in any user or network namespace.

AMI SPx contains a vulnerability in the BMC where an attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

In MOVEit Transfer before version 2021.0.9, 2021.1.7, 2022.0.7, 2022.1.8, and 2023.0.4, it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.

Multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application before version 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4). This could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database.

Authenticated command injection vulnerabilities exist in ArubaOS. Successful exploitation allows executing arbitrary commands as a privileged user on the underlying operating system.

Authenticated command injection vulnerabilities exist in ArubaOS. Successful exploitation allows arbitrary command execution as a privileged user on the underlying operating system.