CVE Vulnerability Catalog

A vulnerability in the Mojolicious library for Perl (versions 4.59 through 9.48) exposes a stable CSRF token representation to a BREACH compression oracle. The token is generated once per session and placed in a hidden `csrf_token` field, and when the response echoes attacker-controlled input and is gzip-compressed, the token can be recovered.

In sigstore-js prior to version 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checking whether any configured auth key contains the target registry string. Because this is a substring match rather than an exact host match, credentials configured for one registry can be selected for and transmitted to a different registry whose hostname has a substring relationship with a configured auth key.

A cross-site scripting (XSS) vulnerability in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network.

A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.

A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.

A vulnerability in Pillow before version 12.3.0 allows an attacker to read process memory or cause a fault when loading an uncompressed McIdas AREA image via the mmap codec path. Attacker-controlled header words can set a row stride smaller than the natural row width, leading to out-of-bounds read beyond the mapped region.

Use-after-free vulnerability in the Windows kernel allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Command injection vulnerability in Copilot Chat within Microsoft Edge. An unauthorized attacker can remotely execute code on the victim's device.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

A vulnerability has been found in Totolink NR1800X firmware version 9.1.0u.6279_B20210910 in the Form_Logout function of the /formLogout.htm file within the lighttpd component. Manipulation of the Host argument causes a stack-based buffer overflow, which can be exploited remotely.

A vulnerability in the DBI library for Perl before version 1.651 does not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index.

An authentication bypass by spoofing vulnerability in the ueberauth_apple library allows account takeover via unvalidated ID token claims. The token's JWT signature is verified, but claims like iss, aud, exp, and iat are not validated, enabling replay attacks.

A denial-of-service vulnerability exists in boot firmware of 5380/5480/5580 controllers prior to version 1.072. It allows a malicious user to write invalid file data to the controller, causing a major non-recoverable fault (MNRF).

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin. An unauthenticated or CSRF attacker can store a malicious payload via the plugin's HTTP endpoint and then activate an irrigation station, leading to arbitrary OS command execution on the host.

A path traversal vulnerability in Tenable Agent versions 11.2.0, 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

A denial-of-service vulnerability in 5380/5480/5580 controllers allows a malicious user to write invalid file data to the device, causing a major non-recoverable fault (MNRF).