CVE Vulnerability Catalog

Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35. A remote attacker could perform UI spoofing via a crafted HTML page.

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Wtyczka H5PxAPIkatchu dla WordPressa od SNORDIAN jest podatna na przechowywane ataki Cross-Site Scripting (XSS) poprzez punkt końcowy AJAX 'insert_data' we wszystkich wersjach do 0.4.17 włącznie, z powodu niewystarczającej sanitizacji danych wejściowych i ucieczki danych wyjściowych. Umożliwia to nieautoryzowanym atakującym wstrzykiwanie dowolnych skryptów webowych na stronach, które będą wykonywane przy każdym dostępie użytkownika do zainfekowanej strony.

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromium security severity: Medium)

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low)

Inappropriate implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Dawn in Google Chrome on Mac prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

W Apollo Federation wystąpiła podatność w logice kompozycji przed wersjami 2.9.5, 2.10.4, 2.11.5 i 2.12.1, która pozwalała na obejście kontroli dostępu na typach/polach. Użytkownicy mogli nieprawidłowo korzystać z dyrektyw kontroli dostępu na typach/polach interfejsów, co mogło prowadzić do nieautoryzowanego dostępu.

The nimsh service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability in its SSL/TLS implementation that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56347.

The NIM server (nimesis) service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56346.

IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 store NIM private keys used in NIM environments in an insecure way, which is susceptible to unauthorized access by an attacker using man-in-the-middle techniques.

W Sonarr w wersji 4.0.15.2940 odkryto podatność, która dotyczy nieznanej funkcji pliku C:\ProgramData\Sonarr\bin\Sonarr.Console.exe w komponencie Service. Manipulacja tym elementem prowadzi do nieprawidłowych domyślnych uprawnień.

W Radarr w wersji 5.28.0.10274 odkryto podatność, która dotyczy nieznanej funkcji w pliku C:\ProgramData\Radarr\bin\Radarr.Console.exe komponentu Service. Manipulacja tą funkcją prowadzi do nieprawidłowych domyślnych uprawnień.

Typebot, an open-source chatbot builder, in versions prior to 3.13.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the webhook block (HTTP Request component). Authenticated users can make arbitrary HTTP requests from the server, including access to AWS Instance Metadata Service (IMDS). By bypassing IMDSv2 protection through custom header injection, attackers can extract temporary AWS IAM credentials for the EKS node role, leading to complete compromise of the Kubernetes cluster and associated AWS infrastructure. Version 3.13.1 fixes the issue.

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware in the upload.cgi module. The sprintf() function concatenates the content of /proc/version (read into a 512-byte buffer) with a 29-byte constant into another 512-byte buffer, causing an overflow when input exceeds 481 bytes. An attacker who can control /proc/version content may potentially execute arbitrary code on the device.