CVE Vulnerability Catalog

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, allowing them to gain admin rights by editing the `isadmin` value in the request.

vm2 is an open source vm/sandbox for Node.js. In versions up to and including 3.9.19, the inspect function in Node.js allows attackers to escape the sandbox and run arbitrary code.

Metabase versions before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server at the server's privilege level. Exploitation does not require authentication.

A format string vulnerability has been identified in ASUS RT-AX56U V2 and RT-AC86U. This issue is caused by lacking validation for a specific value when calling the cm_processChangedConfigMsg function in the AiMesh system.

CVE-2023-37292 describes an improper neutralization of special elements used in OS commands, allowing OS command injection in iSherlock 4.5 and 5.5 user modules. This issue affects iSherlock 4.5 before iSherlock-user-4.5-174 and iSherlock 5.5 before iSherlock-user-5.5-174.

Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.

Version 1.414 of Millhouse-Project was found to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.

OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses in the SSO process, allowing attackers to impersonate any OpenAM user, including the administrator.

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system.

A vulnerability of Unrestricted Upload of File with Dangerous Type has been identified in the file uploading function in the InfoDoc Document On-line Submission and Approval System. This allows an unauthenticated remote attacker to exploit this vulnerability to upload and run arbitrary executable files and perform arbitrary system commands.

In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application.

Using '**' as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, leading to potential security bypass.

There is an absolute path traversal vulnerability in the GitHub repository mlflow/mlflow prior to version 2.5.0.

A remotely exploitable command injection vulnerability was found on Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.

Missing authentication for a critical function within the Kratos NGC Indoor Unit (IDU) before version 11.4 allows remote attackers to gain arbitrary control over the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests.

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it.

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

CVE-2023-34142 involves the cleartext transmission of sensitive information in Hitachi Device Manager on Windows and Linux. The issue affects Device Manager Server, Device Manager Agent, and Host Data Collector components and is present in versions before 8.8.5-02.