CVE Vulnerability Catalog

The session fixation vulnerability allowed authenticated users to continue accessing the Airflow webserver even after their password was reset by the admin, until the user's session expired. The fix implemented invalidates existing user sessions when the password is reset, when using the database session backend.

Apache Airflow and its SMTP and IMAP providers before specified versions are affected by the OpenSSL Certificate validation vulnerability. The default SSL context did not check the server's X.509 certificate, which could lead to the disclosure of mail server credentials or mail contents.

Apache Airflow, in versions prior to 2.7.0, contains a vulnerability that can be exploited by an authenticated user with Connection edit privileges. This allows access to connection information and the exploitation of the test connection feature, potentially leading to a denial of service (DoS) condition on the server.

A flaw was found in ghostscript for Red Hat Enterprise Linux 8, where the fix for CVE-2020-16305 was not included as previously claimed. This issue affects the ghostscript package specifically.

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration.

In Python 3.11 through 3.11.4, a vulnerability was discovered where paths containing null bytes ('\0') are unexpectedly truncated by the os.path.normpath() function. This can lead to situations where an application would have rejected a file for security reasons in Python 3.10.x or earlier, but in Python 3.11.x the file is no longer rejected.

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure.

The hcaptcha extension (also known as hCaptcha for EXT:form) before version 2.1.2 for TYPO3 has an issue with verifying that the required CAPTCHA field is submitted in the form data, allowing a remote user to bypass the CAPTCHA check.

An issue was discovered in MISP version 2.4.174 related to a reflected XSS vulnerability. The issue exists in app/Controller/DashboardsController.php via the id parameter during dashboard editing.

A vulnerability in the Silicon Labs Gecko Bootloader on ARM allows code injection and authentication bypass due to a buffer overflow and out-of-bounds write issue. This affects both 'Standalone' and 'Application' versions of the bootloader.

CVE-2023-40282 describes an improper authentication vulnerability in Rakuten WiFi Pocket devices, allowing a network-adjacent attacker to log into the Management Screen. This may lead to the exposure of sensitive information or changes to the device settings.

The OS command injection vulnerability in CBC products allows a remote authenticated attacker to execute arbitrary OS commands on the device or alter its settings.

A hidden functionality vulnerability in CBC products allows a remote authenticated attacker to execute arbitrary OS commands on the device or alter its settings.

The vulnerability related to improper authentication in CBC products allows a remote authenticated attacker to execute arbitrary OS commands on the device or alter its settings.

The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This allows unauthenticated attackers to specify their user role by supplying the 'role' parameter during registration.

Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file.

Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose information on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file.

CVE-2023-39985 is a vulnerability in Hitachi EH-VIEW (Designer) related to out-of-bounds write, allowing local attackers to potentially execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit this vulnerability as the user must open a malicious file.

A vulnerability in Hitachi EH-VIEW (KeypadDesigner) related to improper restriction of operations within the bounds of a memory buffer may allow local attackers to disclose information and execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities as the user must open a malicious file.

In Google Chrome prior to version 116.0.5845.110, there was an out of bounds memory access in fonts, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page.