CVE Vulnerability Catalog

The vm2 library, an advanced sandbox for Node.js, contains critical security issues and should not be used in production. In versions up to 3.9.19, `Promise` handler sanitization can be bypassed, allowing attackers to escape the sandbox and execute arbitrary code.

DedeCMS v5.7.109 has an arbitrary file upload vulnerability in /dede/file_manage_control.php that allows attackers to execute arbitrary code by uploading a crafted PHP file.

CVE-2023-35070 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in the VegaGroup Web Collection application.

CVE-2023-2957 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in the Lisa Software Florist Site. This issue affects versions before 3.0.

Podatność CVE-2023-1547 dotyczy niewłaściwej neutralizacji specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości wstrzyknięcia SQL poprzez manipulację parametrami SOAP oraz wykonania poleceń z linii komend. Problem ten dotyczy wersji Parkmatik przed 02.01-a51.

The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to and including 3.0.2. This allows authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server.

ModSecurity Core Rule Set up to version 3.3.4 does not detect multiple Content-Type request headers on some platforms, potentially allowing attackers to bypass a WAF with a crafted payload. This issue arises when the web application relies solely on the last Content-Type header.

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.

The SonicWall GMS and Analytics CAS Web Services application uses static values for authentication without proper checks, leading to an authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

CVE-2023-34132 describes a vulnerability where the use of password hash instead of password for authentication in SonicWall GMS and Analytics allows for Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page.

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

The Tomcat application credentials are hardcoded in the SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access CGI scripts without proper identification or authorization. This issue arises from a lack of proper cookie verification.

Online Piggery Management System version 1.0 is vulnerable to File Upload. An unauthenticated user can upload a PHP file by sending a POST request to 'add-pig.php.'

Online Piggery Management System version 1.0 is vulnerable to SQL Injection, which may lead to unauthorized access to the database.

Code-projects Online Restaurant Management System version 1.0 is vulnerable to SQL Injection. An attacker can exploit this vulnerability to bypass the admin panel and view order records, add items, delete items, etc.

The vulnerability in Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.