CVE Vulnerability Catalog

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation allows arbitrary command execution as a privileged user on the underlying operating system.

A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

A compliance problem was found in the Red Hat OpenShift Container Platform. It was discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Memory safety bugs are present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code.

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused.

Insufficient validation in the Drag and Drop API, in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code.

The vulnerability in Firefox and Thunderbird involves the lack of a warning for users when opening Diagcab files that may contain malicious code. This affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

CVE-2023-37202 affects outdated versions of Firefox and Thunderbird, where improper management of objects from different compartments may lead to a use-after-free situation.

CVE-2023-37201 allows an attacker to trigger a use-after-free condition when creating a WebRTC connection over HTTPS. This affects Firefox versions < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization.

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via crafted .exe, .sys, and .dll files.

Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function.

ZZCMS versions 2023 and earlier have a Cross Site Request Forgery vulnerability that allows a remote attacker to gain privileges via the add function in adminlist.php.

Affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.

In version 0.1.0 of the `tktchurch/website` project, a Stripe API key was found in the public code repository. This sensitive information was unintentionally exposed, creating risks of unauthorized transactions and privacy violations.

Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, allowing users to control the recharge resource account, resulting in the ability to recharge any amount of 1 renminbi (RMB).

The vulnerability in `Products.CMFCore` allows the use of Python's marshal module to handle unchecked input in a public method on `PortalFolder` objects, potentially leading to unauthenticated denial of service and crash situations. All deployments based on `Products.CMFCore`, including Plone, are affected.

CometBFT has a synchronization issue with two data structures in the mempool, which can lead to multiple copies of the same transactions. Versions `v0.37.0`, `v0.37.1`, `v0.34.28`, and earlier are vulnerable to this bug, making it impossible to remove duplicates without restarting the node.