CVE Vulnerability Catalog

Vvveb before version 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. Attackers can access the cron controller without authentication and retrieve the exposed secret key from the response, enabling them to trigger scheduled task execution outside of the intended schedule.

i18nextify to biblioteka JavaScript, która umożliwia internacjonalizację stron internetowych bez zmian w kodzie źródłowym. W wersjach przed 4.0.8, tokeny interpolacji {{key}} w atrybutach src i href są zastępowane surowym ciągiem zwracanym przez i18next.t(), co może prowadzić do wstrzyknięcia niebezpiecznych wartości, takich jak javascript:alert(1).

i18nextify to biblioteka JavaScript, która umożliwia internacjonalizację stron internetowych bez zmian w kodzie źródłowym. W wersjach przed 3.0.5 wartości lng i ns są interpolowane bez odpowiedniego kodowania, walidacji lub sanitizacji, co pozwala na wstrzykiwanie złośliwych danych przez użytkowników.

manage.get.gov is the .gov TLD registrar maintained by CISA, allowing an organization administrator to assign domain manager privileges for domains not already in another organization.

A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page. An authenticated attacker (patient) can inject a malicious script into the User Name parameter, which is stored and later rendered in the doctor's interface.

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. Improper file sanitization allows attackers to inject malicious files, leading to RCE.

In MISP versions before 2.5.37, there is a stored XSS vulnerability due to improper neutralization of input during web page generation. An attacker can input malicious values in the type and category fields of template element attributes.

A vulnerability in an identity management API endpoint of Cisco ISE allows an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. The issue exists due to observable error messages when the API endpoint is called.

A vulnerability in the RADIUS Policy API endpoints of Cisco ISE allows an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information. This is due to improper role-based access control (RBAC) permissions on these API endpoints.

A vulnerability in the log file download functionality of Cisco Prime Infrastructure allows an authenticated, remote attacker to download arbitrary log files from the server. This is due to insufficient authorization checks on the download service API.

A vulnerability in the web-based management interface of Cisco IoT Field Network Director allows an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This is due to insufficient input validation of user-supplied data.

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This is due to insufficient file access checks.

HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software.

The vulnerability in HCL BigFix Service Management (SM) involves insufficiently protected credentials for a short duration during communication with a backend internal application. This could allow an attacker to intercept and misuse them if exfiltrated.

A Cross Site Scripting (XSS) vulnerability has been discovered in Juzaweb CMS version 5.0.0. A remote attacker can exploit the Add Banner Ads function to inject a malicious script and execute arbitrary code in the victim's browser.

A vulnerability has been identified and resolved in the Linux kernel. The issue occurs when the second-stage kernel is booted via kexec with limiting parameters, potentially leading to a kernel panic due to memory range errors.

In the Linux kernel, a vulnerability in the cpsw_new network driver may cause an attempt to unregister a network device that has not been registered yet. This occurs when an error happens during the registration of the first MAC, leaving the second MAC unchanged, potentially leading to an incorrect unregister_netdev() call.

In the Linux kernel, a lock was dropped in skb_may_tx_timestamp() that could lead to a deadlock when handling TX timestamps in interrupt context. The function could acquire sock::sk_callback_lock, which must not be used in IRQ context. The fix removes the lock and uses READ_ONCE() to read pointers, adding WRITE_ONCE() when clearing them.

W jądrze systemu Linux zidentyfikowano podatność, która dotyczy nieprawidłowego sprawdzania wsparcia dla PTP w funkcji ixp4xx_get_ts_info(). Wywołanie ixp46x_ptp_find() odbywa się bezwarunkowo, co prowadzi do błędu dereferencji wskaźnika NULL i awarii systemu.

A vulnerability has been identified in the Linux kernel that occurs when booting the second-stage kernel via kexec with a limiting command line. The issue is that the IMA buffer from the previous kernel may fall outside the addressable RAM, leading to a page fault.