CVE Vulnerability Catalog

AMI BMC contains a vulnerability in the IPMI handler that allows an attacker with the required privileges to cause a buffer overflow. This may lead to code execution, denial of service, or escalation of privileges.

AMI BMC contains a vulnerability in the IPMI handler, allowing an unauthenticated host to write to a host SPI flash, bypassing secure boot protections. Exploitation of this vulnerability may lead to loss of integrity or denial of service.

AMI BMC contains a vulnerability in the SPX REST API that allows an attacker with the required privileges to inject arbitrary shell commands. This may lead to code execution, denial of service, information disclosure, or data tampering.

AMI BMC contains a vulnerability in the SPX REST API, allowing an attacker with the required privileges to read and write to arbitrary locations within the memory context of the IPMI server process. This may lead to code execution, denial of service, information disclosure, or data tampering.

SRS is a real-time video server that prior to versions 5.0.157, 5.0-b1, and 6.0.48 is vulnerable to drive-by command injection via its API. An attacker can send a request to the `/api/v1/snapshots` endpoint containing commands to be executed in the body of the POST request.

In JetBrains YouTrack versions before 2023.1.10518, a DoS attack was possible via Helpdesk forms.

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi versions 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The 'This Day In History' plugin versions <= 3.10.1 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

Wtyczka WP Abstracts w wersjach do 2.6.2 zawiera podatność na nieautoryzowane odzwierciedlone ataki typu Cross-Site Scripting (XSS). Atakujący może wykorzystać tę lukę do wstrzyknięcia złośliwego kodu JavaScript.

NanoMQ version 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.

NanoMQ version 0.17.5 has a heap-based buffer over-read in the conn_handler function of mqtt_parser.c when processing malformed messages.

The git-url-parse crate through version 0.4.4 for Rust is vulnerable to a Denial of Service (DoS) attack via a crafted URL, leading to issues with URL normalization in lib.rs.

LabCollector versions 6.0 through 6.15 allows remote code execution. An authenticated low-privileged user can upload a PHP file and execute system commands.

Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.

Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users.

Atos Unify OpenScape 4000 Assistant and Manager systems are vulnerable to command injection affecting versions prior to V10 R1.42.0 and V10 R1.34.8. This allows authenticated users to execute unauthorized commands.

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in the Linux Kernel, which may lead to system crashes during device disconnect.

The @udecode/plate-link plugin for the Plate rich-text editor has a URL sanitization issue that allows the insertion of links using the `javascript:` scheme. Version 20.0.0 introduces the `allowedSchemes` option, which defaults to safe schemes.

Contiki-NG, an operating system for IoT devices, has a vulnerability that allows reading data out of bounds of the IPv6 buffer when processing the MSS option in TCP packets. The issue involves buffer indexing in the module os/net/ipv6/uip6.c, which may lead to unauthorized memory access.