CVE Vulnerability Catalog

Strimzi umożliwia uruchomienie klastra Apache Kafka na Kubernetes lub OpenShift w różnych konfiguracjach wdrożeniowych. W wersjach od 0.47.0 do 0.49.1, w niektórych sytuacjach, Strimzi tworzy niepoprawną rolę Kubernetes, która przyznaje dostęp GET do wszystkich sekretów Kubernetes w danym namespace.

Frappe Learning Management System (LMS) prior to 2.41.0 has a flaw in server-side authorization logic that allowed authenticated users to perform actions beyond their assigned roles across multiple features. Because affected endpoints relied on client-side or UI-level checks instead of enforcing permissions on the server, users with low-privileged roles (such as students) could perform operations intended only for instructors or administrators via directly using the APIs. This vulnerability is fixed in 2.41.0.

cpp-httplib prior to 0.27.0 has a vulnerability that allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTE_ADDR, REMOTE_PORT, LOCAL_ADDR, LOCAL_PORT that are parsed into the request header multimap, and the server later appends its own internal metadata without erasing duplicates, potentially leading to the use of attacker-controlled values.

lz4-java 1.10.0 and earlier insufficiently clears the output buffer in Java-based decompressor implementations. A remote attacker can read previous buffer contents via crafted compressed input. JNI-based implementations are not affected.

W Tuui, kliencie MCP, przed wersją 1.3.4 występuje krytyczna podatność na zdalne wykonanie kodu (RCE) spowodowana niebezpieczną luką Cross-Site Scripting (XSS) w komponencie renderującym Markdown. Luka ta pozwala na wykonanie dowolnego kodu JavaScript w blokach kodu ECharts.

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and 1.15.2, a bug in the permission logic allowed users with "Can share" permission to modify the permissions of other recipients. This vulnerability is fixed in 1.14.6 and 1.15.2.

Nextcloud Tables before versions 0.8.6 and 0.9.3 allows a malicious user to create their own table and then move a column to a victim's table. This vulnerability is fixed in versions 0.8.6 and 0.9.3.

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/defined endpoint. When an authenticated user creates a task, the defined_name value is stored and later rendered without HTML sanitization. An attacker can inject malicious script that executes in the browser of users viewing the task.

Serwery Advantech WISE-DeviceOn w wersjach przed 5.4 zawierają podatność na twardo zakodowany klucz kryptograficzny. Produkt używa statycznego sekretu HS512 HMAC do podpisywania tokenów JWT EIRMMToken, co pozwala na akceptację fałszywych tokenów przez serwer.

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on the server.

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation, resulting in excessive resource consumption (high CPU usage and massive memory allocation).

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete() without validation. A remote authenticated attacker can delete arbitrary files on the server by supplying directory traversal payloads.

The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.

XWiki Remote Macros przed wersją 1.27.1 wykonuje kod Velocity z stron szczegółowych bez sprawdzania uprawnień, co może prowadzić do zdalnego wykonania kodu. Wersja 1.27.1 naprawia tę podatność.

A flaw was found in util-linux that allows a heap buffer overread when processing 256-byte usernames in the `setpwnam()` function. This affects SUID login-utils utilities that write to the password database.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific conditions.

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.

zdh_web is a data collection, processing, monitoring, scheduling, and management platform. In zdh_web thru 5.6.17, insufficient validation of file upload paths in the application allows an authenticated user to write arbitrary files to the server file system, potentially overwriting existing files and leading to privilege escalation or remote code execution.

A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.

A reflected Cross Site Scripting (XSS) vulnerability in Fanvil x210 devices version 2.12.20 allows attackers to cause denial of service or potentially execute arbitrary commands via a crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint.