CVE Vulnerability Catalog

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address_1 results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Severity: Medium)

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75. A remote attacker who compromised the renderer process could bypass web origin policy via a crafted HTML page.

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75. A remote attacker who compromised the renderer process could bypass web origin policy via a crafted HTML page.

The joi library (and @hapi/joi) has a prototype pollution vulnerability in lib/messages.js. The exports.compile() and exports.merge() functions reuse inherited objects for attacker-controlled language keys, allowing properties to be written to Object.prototype.

In the joi library, there is a vulnerability in the internals.rename() implementation used by object().rename(). It allows creating a schema that, using a regular expression and a Joi.expression() or Joi.x() target with match data interpolation, can set the prototype of the object returned by validate() to __proto__ instead of creating an own key.

In pypdf (Python PDF library) prior to version 6.16.1, an attacker can craft a PDF that causes PageObject._extract_text and PageObject.extract_xform_text to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times, creating exponentially many traversal paths and causing long runtimes and large memory consumption. This issue is fixed in version 6.16.1.

In pypdf (Python PDF library) prior to version 6.16.1, an attacker can craft a PDF that causes _get_outline in _doc_common.py to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.

Filament (a collection of full-stack components for Laravel) has a vulnerability in Login.php where the MFA challenge is presented before evaluating canAccessPanel(). For an account that canAccessPanel() denies, a correct password renders the MFA challenge while an incorrect password returns a generic authentication failure, allowing an unauthenticated attacker to confirm whether a candidate password is valid.

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in cleartext format. Successful exploitation could allow retrieval of information that could be used to gain further access to network services.

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low-privilege operator user with local access to elevate their privileges and make limited modifications on the affected system.

A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low-privilege operator user to cause a denial of service. Successful exploitation could interrupt the normal operation of the affected service.

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow insight into internal services and workflows, increasing the risk of unauthorized access when combined with other vulnerabilities.

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low-privilege operator user to cause a denial of service. Successful exploitation could disrupt the availability of the affected interface.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data handled by the affected interface. A successful exploit could allow access to data in cleartext format, possibly exposing other network infrastructure to further compromise.

An authorization bypass vulnerability in the runZero Platform MCP service allows bypassing authorization through a user-controlled key (CWE-639). The issue is fixed in version 5.1.260826.0, with an estimated CVSS score of 3.5 (Low).

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.

Incorrect authorization vulnerability in ash authorizes an aggregate under one read action while computing it under another, so an aggregate can run with policies that do not match the action it was authorized against. This can lead to disclosure of information about records the actor cannot read.