CVE Vulnerability Catalog

A critical vulnerability has been found in IBOS OA version 4.5.5, affecting the addComment function in the file ?r=weibo/comment/addcomment. Manipulation of the touid argument leads to SQL injection.

A critical vulnerability was found in Xintian Smart Table Integrated Management System version 5.6.9, affecting an unknown part of the file /SysManage/AddUpdateRole.aspx. Manipulation of the argument txtRoleName leads to SQL injection.

A critical vulnerability has been found in D-Link DAR-8000-10 up to version 20230819, related to argument manipulation in the file /log/decodmail.php, leading to OS command injection.

A vulnerability was found in TOTVS RM 12.1 that allows cross site scripting through manipulation of the argument 'd' in the Portal component. The attack can be launched remotely.

The open source library @dcl/single-sign-on-client, used for handling single sign-on authentication flows, contains an input validation vulnerability in the `init` function, allowing arbitrary JavaScript to be executed using the `javascript:` prefix.

In XWiki Platform, it is possible to execute Velocity code without having script rights by creating an XClass with a property of type 'TextArea' and content type 'VelocityCode' or 'VelocityWiki'. In both cases, the code is executed regardless of the rights of the property author, which may lead to unauthorized access to data and APIs.

A vulnerability has been found in TOTVS RM 12.1 that allows cross site scripting attacks through manipulation of the VIEWSTATE argument in the Login.aspx file. The attack can be executed remotely, but its complexity is high.

Version 0.95 of Catdoc was found to contain a NULL pointer dereference vulnerability in the xls2csv component at src/fileutil.c.

An issue was discovered in the default implementations of the `VolatileMemory` trait functions in a typical Virtual Machine Monitor (VMM), which may lead to out-of-bounds memory access. This affects users of custom `VolatileMemory` implementations that do not adhere to the `get_slice` documentation.

A critical vulnerability was found in Infosoftbd Clcknshop 1.0.0, affecting unknown processing of the file /collection/all in the GET Parameter Handler component. Manipulation of the argument tag leads to SQL injection.

A vulnerability was found in Infosoftbd Clcknshop 1.0.0, leading to cross site scripting (XSS) attacks through manipulation of the argument q in the file /collection/all. The attack can be initiated remotely.

Multiple cross-site scripting (XSS) vulnerabilities in the inventory management system version 1.0 allow attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section.

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components.

O-RAN Software Community ric-plt-lib-rmr version 4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.

Integer overflow or wraparound exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.

There is an out-of-bounds read vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.

In the GitHub repository gpac/gpac prior to version 2.3-DEV, there is a floating point comparison bug using an incorrect operator.

CVE-2023-40980 in DWSurvey DWSurvey-OSS version 3.2.0 and earlier allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

CVE-2023-40968 describes a buffer overflow vulnerability in version 1.5.1 and earlier of the hzeller timg library, allowing a remote attacker to cause a denial of service.

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function.