CVE Vulnerability Catalog

A use-after-free vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 allows remote attackers to execute arbitrary code via a crafted JavaScript file.

A SQL injection vulnerability was discovered in novel-plus version 3.6.2. This flaw could allow an attacker to manipulate database queries.

CVE-2023-3267 allows an authenticated user to pass arbitrary OS commands through the username field when adding a remote backup location. This field is passed unsanitized into CMD running as NT/Authority System.

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected. An unauthenticated attacker can log in to the CypberPower PowerPanel Enterprise as an administrator by selecting LDAP authentication from a hidden HTML combo box.

An authentication bypass exists on CyberPower PowerPanel Enterprise due to failing to sanitize meta-characters from the username. An attacker can log in to the application with the default user 'cyberpower' by appending a non-printable character.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the 'iBootPduSiteAuth' cookie, a malicious agent can direct the device to connect to a rogue database.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

Vulnerability related to configuration defects in the media module of certain products. Successful exploitation of this vulnerability may lead to unauthorized access.

Vulnerability related to out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may lead to other apps being executed with escalated privileges.

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to and including 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled.

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. This issue exists because of an incomplete fix for CVE-2022-24439.

EmpowerID versions before 7.205.0.1 allow an attacker to bypass MFA requirements if the first factor (username and password) is known. Knowing the first factor enables changing the account's email address, to which MFA codes are then sent.

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar files, insufficient length checking may lead to a stack buffer overflow, potentially resulting in memory corruption or RCE.

A vulnerability was discovered in Veritas NetBackup Snapshot Manager before version 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service.

A SQL injection vulnerability was discovered in iCMS v7.0.16 within the bakupdata function. Attackers can exploit this flaw to execute unauthorized database queries.