CVE Vulnerability Catalog

GitPython is a Python library used to interact with Git repositories. Due to a lack of verification of file locations, GitPython can read any file from the system, creating an attack risk.

Version 3.3.7 of Archive contains a vulnerability that allows attackers to perform a path traversal attack by extracting a crafted zip file.

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file.

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.

In version 2.5.4 of the ZipArchive component, an unhandled edge case allows attackers to trigger a Denial of Service (DoS) attack via a crafted zip file.

Version 2.1.2 of the Zip Swift library contains a vulnerability that allows a path traversal attack via a crafted zip entry.

Badaso versions from 0.0.1 to 2.9.7 contain a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload in the 'Name of member' parameter in the add new member function.

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's 'format' functionality allows someone controlling the format string to 'read' all objects accessible through recursive attribute lookup and subscription from objects he can access, which can lead to critical information disclosure.

find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input, leading to a command injection vulnerability.

xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions.

In borgbackup, an open-source deduplicating archiver, a flaw in the cryptographic authentication scheme allowed an attacker to fake archives, potentially leading to backup data loss. The attack required access to the repository and the ability to insert files into backups.

The controller responsible for setting the logging level does not include any authorization checks, allowing unauthorized users to access it. This issue affects YugabyteDB Anywhere from versions 2.0.0 to 2.17.3.

In Splunk IT Service Intelligence (ITSI) versions below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject ANSI escape codes into log files, which can lead to the execution of malicious code in a vulnerable terminal application. The attack requires user interaction and the use of a terminal application that translates ANSI escape codes.

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_7D858'.

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'formWifiBasicSet' function.

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function 'sub_73004'.

Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'R7WebsSecurityHandler' function.

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'add_white_node' function.