CVE Vulnerability Catalog

Woodpecker, a fork of the Drone CI system, has a vulnerability that allows an attacker to post malformed webhook data, which can lead to updates of repository data and potentially allow for repository takeover. This issue is critical if the CI is configured for public use and connected to a publicly accessible forge.

Flarum, an open source forum software, is vulnerable to a Blind Server-Side Request Forgery (SSRF) attack and file disclosure on the server, even with a basic user account. By exploiting the vulnerability, an attacker can manipulate the application to execute unintended actions.

Oppia is an online learning platform that uses the equality operator to compare CSRF tokens, making it vulnerable to timing attacks. An attacker can guess the CSRF token, allowing them to perform actions on behalf of a logged-in user.

A vulnerability has been found in MaximaTech Portal Executivo version 21.9.1.140, affecting unknown code of the Cookie Handler component. The manipulation leads to missing encryption of sensitive data.

A critical vulnerability was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux, affecting an unknown part of the file runasroot. Manipulation leads to incorrect execution-assigned permissions.

A vulnerability classified as problematic has been found in tdevs Hyip Rio 2.1. It affects some unknown functionality of the file /user/settings of the Profile Settings component, where manipulation of the avatar argument leads to cross site scripting.

A flaw was found in btrfs_get_root_ref in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.

A use-after-free flaw was found in the vmxnet3 Ethernet NIC driver in the Linux Kernel, which could allow a local attacker to crash the system due to a double-free during vmxnet3_rq_cleanup_all, potentially leading to a kernel information leak.

IBM WebSphere Application Server Liberty versions 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

A NULL pointer dereference flaw was found in dbFree in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerability, posing a potential risk to the security and integrity of the affected device. The presence of a hardcoded key could potentially facilitate firmware manipulation.

Dell Storage Integration Tools for VMware and Dell Storage vSphere Client Plugin versions prior to 6.1.1 and Replay Manager for VMware versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.

The Favorite View plugin in Jenkins versions 5.v77a_37f62782d and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to add or remove views from another user's favorite views tab bar.

Jenkins Docker Swarm Plugin version 1.11 and earlier does not escape values returned from Docker before inserting them into the Docker Swarm Dashboard view, leading to a stored XSS vulnerability.

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.

The webhook endpoint in Jenkins Gogs Plugin version 1.0.15 and earlier exposes unauthenticated attackers to information about the existence of jobs in its output.

The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin version 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access credentials they are not entitled to.

Jenkins Shortcut Job Plugin version 0.4 and earlier does not escape the shortcut redirection URL, leading to a stored cross-site scripting (XSS) vulnerability that can be exploited by attackers able to configure shortcut jobs.

The Delphix Plugin for Jenkins version 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access credentials they are not entitled to.

A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.