CVE Vulnerability Catalog

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization.

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization.

An issue was discovered in TechView LA-5570 Wireless Gateway version 1.0.19_T53, allowing attackers to gain sensitive information via /config/system.conf.

The 'Open Redirect' vulnerability in the FORM authentication feature of Apache Tomcat allows redirecting users to untrusted sites. This affects Apache Tomcat versions from 11.0.0-M1 to 11.0.0-M10, from 10.1.0-M1 to 10.0.12, from 9.0.0-M1 to 9.0.79, and from 8.5.0 to 8.5.92.

Pyramid is an open source Python web framework. A path traversal vulnerability in versions 2.0.0 and 2.0.1 may disclose the `index.html` file if it is placed in the correct location relative to the static view.

OWASP Coraza WAF, a modsecurity compatible web application firewall library, crashes due to misuse of `log.Fatalf`. The application crashes immediately after receiving crafted requests from attackers, triggered by an error in `mime.ParseMediaType`.

A vulnerability in the ironic-image container image allows access to the Ironic API without authentication if it is not deployed with TLS and does not have API and Conductor split into separate services. If there is no firewall, the API could be accessed by anyone on the network.

In the go-libp2p library, using signed peer records, a malicious actor can store an arbitrary amount of data in a remote node's memory. This memory is not garbage collected, which can lead to memory exhaustion and node crashes.

In versions 0.2.3 and prior, the weblogic-framework tool does not verify returned data packets, leading to a deserialization vulnerability. This may result in remote code execution when the tool deserializes data returned by the server without verification.

Notepad++ versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining`. Exploitation of this vulnerability may lead to leaking internal memory allocation information.

Notepad++ versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. Exploitation of this vulnerability may lead to leaking internal memory allocation information.

An issue was discovered in Libreswan 3.x and 4.x before version 4.12 related to an IKEv1 ISAKMP SA Informational Exchange packet. When it contains a Delete/Notify payload followed by further Notifies, it can lead to a NULL pointer dereference, causing the pluto daemon to crash and restart.

An issue was discovered in Libreswan before version 4.12, occurring when an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN. This causes a NULL pointer dereference, resulting in a crash and restart of the pluto daemon.

An issue was discovered in Libreswan before version 4.12 related to IKEv2 Child SA REKEY packets containing an invalid IPsec protocol ID of 0 or 1. This results in an error notify INVALID_SPI being sent back, causing the pluto daemon to crash.

Freighter is a Chrome extension for Stellar that may be vulnerable to an attack from a malicious website, allowing access to the recovery mnemonic phrase when the Freighter wallet is unlocked. This vulnerability impacts access control to the recovery phrase.

OpenFGA is an authorization engine that is vulnerable to authorization bypass when calling the ListObjects API in version 1.3.0 or earlier. The issue affects users using models containing expressions of type rel1 from type1.

Notepad++ versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. Exploitation of this issue may lead to leaking internal memory allocation information.

Notepad++ versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution.

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section.

IceWarp version 11.4.6.0 was found to contain a cross-site scripting (XSS) vulnerability via the color parameter.