CVE Vulnerability Catalog

A SQL injection vulnerability was discovered in novel-plus version 3.6.2. This flaw could allow an attacker to manipulate database queries.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.4.3, allowing for the storage of malicious code.

The vulnerability allows an attacker to misuse ESET’s file operations during the module update, potentially leading to the deletion or movement of files without proper permissions.

GNU indent version 2.2.13 has a heap-based buffer overflow vulnerability in the search_brace function in indent.c, which can be exploited via a crafted file.

GNU inetutils before 2.5 may allow privilege escalation due to unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd.

CVE-2023-3267 allows an authenticated user to pass arbitrary OS commands through the username field when adding a remote backup location. This field is passed unsanitized into CMD running as NT/Authority System.

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected. An unauthenticated attacker can log in to the CypberPower PowerPanel Enterprise as an administrator by selecting LDAP authentication from a hidden HTML combo box.

An authentication bypass exists on CyberPower PowerPanel Enterprise due to failing to sanitize meta-characters from the username. An attacker can log in to the application with the default user 'cyberpower' by appending a non-printable character.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials. Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in the ReceiveFrom and Receive functions in udpsocket.hpp when processing malformed UDP packets.

In version 2.0.8 of the libboron library, there is a heap-based buffer overflow in the ur_strInitUtf8 function in string.c.

Version 2.0.8 of the libboron library has a heap-based buffer overflow in the ur_parseBlockI function in i_parse_blk.c.

Harman Infotainment version 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.

Harman Infotainment version 20190525031613 and later discloses the IP address via CarPlay CTRL packets.

Harman Infotainment version 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle using a password that is an internal project name.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library. Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary commands on the underlying Linux operating system.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the 'iBootPduSiteAuth' cookie, a malicious agent can direct the device to connect to a rogue database.