CVE Vulnerability Catalog

A stored XSS vulnerability was found in Collabora Online prior to versions 22.05.13, 21.11.9.1, and 6.4.27, allowing an attacker to inject malicious code via document names. When an administrator opened the admin console, the document name could be executed as a script, risking the leak of the JWT.

Version 1.12 of the EDIMAX BR-6288ACL device was found to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.

Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4File::ReadString() function in mp4file_io.cpp.

An SQL injection issue was discovered in EaseProbe before version 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.

In Deno version 1.34.0 and deno_runtime 0.114.0, there is a vulnerability that allows unauthorized outbound HTTP requests as they are not checked against the network permission allow list. Users of Deno versions prior to 1.34.0 and Deno Deploy users are unaffected.

In versions prior to 1.4.16, the metachain in the mx-chain-go implementation incorrectly processed transactions with an invalid username, which could lead to the halting of block notarization from shards.

An unchecked return value issue exists in the GitHub repository gpac/gpac prior to version 2.2.2.

There is a NULL Pointer Dereference bug in the GitHub repository gpac/gpac prior to version 2.2.2.

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated arbitrary file read.

TOTOLINK X5000R versions V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a post-authentication buffer overflow vulnerability in the addEffect function via the sPort/ePort parameters.

A critical vulnerability has been found in ningzichun Student Management System version 1.0, affecting the login.php file. Manipulation of the user/pass arguments leads to SQL injection.

A vulnerability in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain user login credentials via a crafted request to the /rest/synchronizer/1.0/technicalUser endpoint.

Wtyczka Blog-in-Blog dla WordPressa jest podatna na lokalne włączenie plików w wersjach do 2.0.0 włącznie, poprzez atrybut shortcode. Umożliwia to atakującym na poziomie edytora i wyżej dołączenie i wykonanie dowolnych plików na serwerze, co pozwala na wykonanie dowolnego kodu PHP w tych plikach.

A vulnerability was found in ImageMagick that allows shell command injection via video:vsync or video:pixel-format options during video encoding/decoding.

Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment, which executes in the browser of another user.

Macrovideo v380pro version 1.4.97 shares the device id and password when sharing the device.

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification of the Verify parameter in a warning message.

A path traversal vulnerability exists in the Xibo CMS that allows an authenticated user to upload a specially crafted zip file. This can lead to the creation of files outside the CMS library directory, enabling remote code execution.

RIOT-OS, an operating system for IoT devices, contains a network stack capable of processing 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device, triggering a race condition that leads to invalid memory access and denial of service.

RIOT-OS, an operating system for IoT devices, contains a network stack capable of processing 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send a crafted frame, leading to a NULL pointer dereference and crashing the device, resulting in denial of service.