CVE Vulnerability Catalog

An Authentication Bypass vulnerability in Ivanti Sentry before versions R10.5.2, R10.6.2, and R10.7.1 allows a remote unauthenticated attacker to create arbitrary administrative accounts. This leads to full administrative access.

E-İmar from Netcad Software Inc. versions 2.10.1.0 through before 3.0.2 is vulnerable to SQL injection due to improper neutralization of special elements.

In the Linux kernel, the RDMA/rxe driver has a vulnerability due to incorrect iova-to-va conversion for memory regions (MR) with page sizes different from PAGE_SIZE. This bug causes wrong pointer calculations during memory access, potentially leading to a kernel panic.

In the Linux kernel, KVM/arm64 vgic-its has a bug in vgic_its_invalidate_cache() that can drop the same reference multiple times during concurrent cache invalidation, leading to use-after-free.

The WordPress Insert PHP plugin before version 3.3.1 contains a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint with crafted content containing insert_php shortcodes to include and execute remote PHP files on the server.

SQL injection in the 'two_steps_auth_code' parameter processed by the 'twoStepsAuthVerification' function in the '/user-login' endpoint. The 2FA functionality is accessible without authentication, allowing unauthenticated attackers to execute arbitrary SQL queries. Successful exploit can lead to database enumeration, unauthorized creation of privileged users, modification or deletion of critical information, and denial of service.

ARM Cortex and Neoverse series processors may allow writes to resources owned by a higher exception level. The vulnerability affects multiple models including Cortex-X925, Cortex-X4, Neoverse V3 and others.

A vulnerability in the Catalyst::Plugin::Authentication library for Perl before version 0.10_027 allows session fixation attacks. The library does not automatically change the session ID after authentication, enabling an attacker to hijack the victim's session.

DBI for Perl before version 1.648 saves error messages in a limited-size buffer (200 bytes) without length control. Attackers who can influence error text may cause a buffer overflow.

QuMagie contains an authorization bypass vulnerability through a user-controlled key, allowing remote attackers to gain unintended privileges. The vulnerability is fixed in version 2.9.1.

Zephyr OS has a memory corruption vulnerability in the HTTP server WebSocket upgrade path. An unauthenticated remote attacker can trigger it by sending a crafted Sec-WebSocket-Key header. The bounded copy does not guarantee NUL termination, leading to out-of-bounds read/write on stack.

SAP NetWeaver Application Server ABAP and ABAP Platform allow an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, leading to unauthorized access to sensitive user data and potential disruption of normal system usage.

SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to manipulate parameters in an HTTP logon request, enabling path traversal and processing of the included file. This can lead to reading, modifying, or denying access to data.

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Use-after-free vulnerability in the Navigation component of Google Chrome prior to 149.0.7827.103 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium severity: High.

Google Chrome on Linux prior to version 149.0.7827.103 has an integer overflow vulnerability in the UI component. A remote attacker can use a crafted HTML page to potentially perform a sandbox escape.

Use-after-free vulnerability in the CameraCapture component of Google Chrome on Mac prior to version 149.0.7827.103. A remote attacker could potentially escape the sandbox via a crafted HTML page.

Use-after-free vulnerability in the Network component of Google Chrome prior to 149.0.7827.103. A remote attacker can execute arbitrary code inside a sandbox via a crafted HTML page.