CVE Vulnerability Catalog

In Sogou Workflow v0.10.6, there is a vulnerability related to the memcpy function that may accept a negative size in URIParser::parse, potentially leading to buffer overflow and application crash.

A command injection vulnerability exists in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. An attacker with web management privileges can inject commands and gain shell access.

A heap buffer overflow vulnerability exists in NanoMQ version 0.17.2. It can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c.

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware AR_g5.8_110WVN0b7_2). It allows an authenticated user to execute arbitrary OS commands via specially crafted input.

Wtyczka ReviewX dla WordPressa jest podatna na eskalację uprawnień w wersjach do 1.6.13 włącznie, z powodu niewystarczających ograniczeń w funkcji 'rx_set_screen_options'. Umożliwia to uwierzytelnionym atakującym, posiadającym minimalne uprawnienia, takie jak subskrybent, modyfikację swojej roli użytkownika.

Wtyczka WP User Switch dla WordPressa jest podatna na obejście uwierzytelnienia w wersjach do 1.0.2 włącznie. Problem wynika z nieprawidłowego sprawdzania uwierzytelnienia w funkcji 'wpus_allow_user_to_admin_bar_menu' z wartością ciasteczka 'wpus_who_switch'.

Avo is an open source ruby on rails admin panel creation framework that is vulnerable to Cross Site Scripting (XSS) in affected versions when rendering HTML based content. Attackers need form edit privilege to successfully exploit this vulnerability.

Avo is a Ruby on Rails admin panel creation framework that does not validate polymorphic field types in the backend. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record.

CVE-2023-3027 affects the grc-policy-propagator, which allows for security escalation within the cluster. The propagator enables policies with dynamically obtained values, potentially leading to unauthorized access to cluster resources.

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

In versions prior to 2023.4.5, hoppscotch exposes the database password in logs when showing the database connection string. Attackers with access to system logs can gain full access to the database.

Minical version 1.0.0 and earlier contains a CSV injection vulnerability that allows an attacker to execute remote code. The issue arises from insufficient input validation on the Customer Name field in the Accounting module used to construct a CSV file.

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

The Mobatime mobile application AMXGT100 has an incorrect authorization vulnerability that allows a low-privileged user to impersonate anyone else, including administrators.

An anonymous user may obtain a list of existing users managed by the application, which could ease further attacks.

The xml-rs crate before version 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token in an XML document. The earliest affected version is 0.8.9.

Podatność w Harbinger Offline Player 4.0.6.0.2 pozwala na przemieszczanie się po katalogach (directory traversal) poprzez użycie sekwencji „..\” w adresie URL. Atakujący może wykorzystać ten błąd w procesie OfflinePlayerService.exe działającym z uprawnieniami LocalSystem.

A critical vulnerability was found in Captura up to version 8.0.0, affecting unknown code in the CRYPTBASE.dll library. Manipulation leads to uncontrolled search path.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.