CVE Vulnerability Catalog

Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or manipulate database information by sending crafted payloads to the collections page.

Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the unquoted binary path to execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.

dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by exploiting improper input validation.

W wersji 20.7 (Build 2555) oprogramowania AzeoTech DAQFactory występuje podatność na zapis poza granicami, która może być wykorzystana przez atakującego do spowodowania zapisu danych poza końcem przydzielonego bufora pamięci. Może to prowadzić do wykonania dowolnego kodu lub awarii systemu.

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.

W wersji 20.7 (Build 2555) oprogramowania AzeoTech DAQFactory występuje podatność związana z dostępem do niezinicjalizowanego wskaźnika, która może być wykorzystana przez atakującego do wykonania dowolnego kodu.

W wersji 20.7 (Build 2555) oprogramowania AzeoTech DAQFactory występuje podatność związana z dostępem do zasobów przy użyciu niekompatybilnego typu, co może prowadzić do uszkodzenia pamięci podczas analizy specjalnie przygotowanych plików .ctl. Może to umożliwić atakującemu wykonanie kodu w kontekście bieżącego procesu.

W wersji 20.7 (Build 2555) oprogramowania AzeoTech DAQFactory występuje podatność typu use after free, która może prowadzić do uszkodzenia pamięci podczas analizy specjalnie przygotowanych plików .ctl. Może to umożliwić atakującemu wykonanie kodu w kontekście bieżącego procesu.

In yangshare warehouseManager 仓库管理系统 1.1.0, the addCustomer function in CustomerManageHandler.java is vulnerable to cross site scripting (XSS) via manipulation of the Name argument. The attack can be executed remotely, and the exploit is publicly available.

Zidentyfikowano słabość w systemie zarządzania klasami i harmonogramem egzaminów w wersji 1.0. Problem dotyczy nieznanej funkcjonalności pliku /preview7.php, gdzie manipulacja argumentem course_year_section/semester prowadzi do wstrzyknięcia SQL.

The WP Job Portal plugin for WordPress in all versions up to and including 2.4.0 is vulnerable to Arbitrary File Read via the 'downloadCustomUploadedFile' function. This allows authenticated attackers with Subscriber-level access and above to read the contents of arbitrary files on the server.

A potential security vulnerability in Quartus Prime Standard Edition Design Software may allow escalation of privilege.

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target directory already exists.

Pre-authentication denial of service vulnerability in React Server Components versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, allows unsafe deserialization of payloads from HTTP requests to Server Function endpoints, causing an infinite loop that hangs the server process.

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function.

In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

In the GetTachyonCommand function of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In the trusty_ffa_mem_reclaim function of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In the bigo_worker_thread function in bigo.c, there is a possible use-after-free due to a race condition. This could lead to local privilege escalation without additional execution privileges. User interaction is not needed for exploitation.