CVE Vulnerability Catalog

A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data.

A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.

.NET and Visual Studio contain a vulnerability that allows remote code execution, potentially leading to unauthorized access to the system.

Version 3.0.5 of hoteldruid was found to contain a SQL injection vulnerability.

Zoom for Windows and MacOS clients before 5.14.10 have a vulnerability that may allow an authenticated user to disclose information via network access.

A use after free vulnerability in WebXR in Google Chrome prior to version 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Type confusion in V8 in Google Chrome prior to version 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A use after free vulnerability in WebRTC in Google Chrome prior to version 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use after free in Autofill payments in Google Chrome prior to version 114.0.5735.133 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before version 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

A vulnerability has been identified in CP-8031 and CP-8050 modules that are versions earlier than CPCI85 V05. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation.

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that contain a memory corruption error while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that may read data out of bounds while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.

SAP UI5 Variant Management in versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, and UI_700 200 does not sufficiently encode user-controlled inputs when reading data from the server, resulting in a Stored Cross-Site Scripting (Stored XSS) vulnerability. After successful exploitation, an attacker with user-level access can impact confidentiality, modify some information, and cause unavailability of the application at the user level.

Asus RT-N10LX Router v2.0.0.39 was found to have a stack overflow vulnerability via the mac parameter at /start-apply.html. This vulnerability only affects products that are no longer supported by the maintainer.

Asus RT-N10LX Router v2.0.0.39 was found to contain a stack overflow via the url parameter at /start-apply.html. This vulnerability only affects products that are no longer supported by the maintainer.

AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.