CVE Vulnerability Catalog

A Prototype Pollution vulnerability was found in Tree-kit library version 0.7.4 and earlier. It allows a remote attacker to execute arbitrary code via the extend function.

IBM Security Guardium versions 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

The Campcodes Online Matrimonial Website System Script 3.3 has an XSS vulnerability that can be exploited via a crafted SVG document in the upload module.

The 'Customization fields fee for your store' (aicustomfee) module in the ai-dev module for PrestaShop is vulnerable to SQL injection up to version 0.2.0. Version 0.2.1 has fixed this security issue.

A Directory Traversal vulnerability in the Server functionality of Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.

Version 1.0 of webchess was found to contain a SQL injection vulnerability via the $playerID parameter in mainmenu.php. However, there is controversy regarding this vulnerability as a third party claims that playerID is a session variable controlled by the server, making it impossible to exploit.

Version 1.3 of Schoolmate was found to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters in DeleteFunctions.php.

Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. There is a dispute regarding whether the userid is a session variable controlled by the server.

COMFAST CF-XR11 version V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameters interface and display_name.

Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function in the bin/webmgnt file.

The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to set up CIM connection.

The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.

Broadcom RAID Controller is vulnerable to privilege escalation to root due to the creation of insecure folders by the Web GUI.

Broadcom RAID Controller is vulnerable to privilege escalation by taking advantage of session prints in the log file.

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not provide X-Content-Type-Options headers.

The Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation.

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute.

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribute.

The Broadcom RAID Controller web interface is vulnerable due to the use of Libcurl, which has known vulnerabilities.

The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking HTTP Content-Security-Policy headers.