CVE Vulnerability Catalog

Talend Data Catalog before 8.0-20230221 contains a directory traversal vulnerability in HeaderImageServlet.

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab.

Denial of Service vulnerability exists in the GitHub repository jgraph/drawio prior to version 18.1.3.

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

XMLTooling versions before 3.2.4, used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element.

In version 4.6.4 of openITCOCKPIT before 4.6.5, there is a SQL Injection vulnerability that can be exploited by authenticated users via the sort parameter of the API interface.

The email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger 'RecursionError: maximum recursion depth exceeded while calling a Python object' via a crafted argument. This argument may plausibly come from untrusted application input data that was supposed to contain a name and an email address.

In CloudPanel before version 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

Directory traversal can occur in the Basecamp com.basecamp.bc3 application before version 4.2.1 for Android, allowing an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications using a custom-crafted deeplink scheme.

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'nsc_bar_content_href' parameter in versions up to and including 2.10.1 due to insufficient input sanitization and output escaping.

CVE-2023-35932 affects the jcvi library, which is used for genome assembly, annotation, and comparative genomics. It contains a vulnerability related to configuration injection when user input is treated in an unsanitized format and can reach the configuration file.

In Nextcloud Server versions 25.0.0 to 25.0.7 and 26.0.0 to 26.0.2, as well as in Nextcloud Enterprise Server versions 19.0.0 to 19.0.13.9, there was a vulnerability that allowed users to access another user's login credentials and take over their account. This issue has been patched in newer versions of the software.

NextCloud Server and NextCloud Enterprise Server have a vulnerability that allows a malicious server to modify or delete VCards in the system address book when two servers are registered as trusted and exchange share secrets. This affects versions from 25.0.0 to 25.0.7 and from 26.0.0 to 26.0.2, as well as various versions of Nextcloud Enterprise Server.

NextCloud Server and NextCloud Enterprise Server have a vulnerability that allows an attacker to bruteforce password reset links in specific versions of the software. This affects versions 25.0.0 to 25.0.7 and 26.0.0 to 26.0.2 for NextCloud Server and various versions of NextCloud Enterprise Server.

Knowage is an open source analytics and business intelligence suite. In versions 6.0.0 through prior to 8.1.8, an attacker could register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user.

GLPI Agent prior to version 1.5 has a vulnerability that allows a remote administrator to inject a command into a specific workflow the agent runs. If the agent is running with administrative privileges, a malicious user could gain high privileges on the computer running glpi-agent.

Version 2.0 of POS Codekop has an authenticated remote code execution (RCE) vulnerability via the filename parameter.

A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.

In OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before version 12.7, a remote user with any OEM or OEE role could perform a URL injection attack to change identity or role membership, e.g., escalate to admin.

The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. An attacker can send a single attack payload over TCP, causing an infinite loop in which the server continuously reparses that payload and does not respond to any other requests.