CVE Vulnerability Catalog

A stack-based buffer overflow vulnerability was found in the File Explorer on ADM. User-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer, potentially causing denial of service of the CGI process.

A path traversal vulnerability was found in the VPN Clients on ADM. User-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path.

The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in versions up to 14.5.0. The bp_unserialize_profile_field() function uses @unserialize() without the allowed_classes parameter on user-controlled XProfile field data.

The FleekDash V2 plugin for WordPress is vulnerable to authorization bypass in versions up to 2.6.2.2. The public /wp-json/fleekdash/v1/register endpoint auto-provisions a Subscriber-role account and returns a valid REST nonce regardless of the users_can_register setting.

A format string vulnerability was found in the Notification OAuth settings of ADM. User-controlled notification configuration input may be processed through an unsafe format string operation.

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this to gain file system read access.

A format string vulnerability was found in the Rsync Backup on ADM. User-controlled rsync backup configuration or log data may be processed through an unsafe format string operation.

A format string vulnerability in the Internal Backup function of ADM. User-controlled task input is processed unsafely, allowing memory information disclosure or denial of service.

A stored format string vulnerability in the FTP Backup function of ADM. User-controlled backup configuration data is logged and later processed unsafely, allowing memory disclosure or denial of service.

A race condition vulnerability in ASUS Armoury Crate. A local user can exploit concurrent execution with improper synchronization to execute arbitrary code with elevated privileges via file replacement.

An SQL injection vulnerability in LG Electronics SmartShare. Improper neutralization of special elements in an SQL command allows SQL injection.

In Google Chrome prior to version 151.0.7922.72, a use-after-free vulnerability exists in the Dawn component. A remote attacker can use a crafted HTML page to execute arbitrary code inside a sandbox.

In Google Chrome prior to version 151.0.7922.72, a use-after-free vulnerability exists in the PDFium component. A remote attacker can use a crafted PDF file to execute arbitrary code inside a sandbox.

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file.

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in the Frame component in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.