CVE Vulnerability Catalog

A critical vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5 related to improper access controls in the file /api/sys/set_passwd. An attacker can exploit this vulnerability remotely.

A vulnerability was found in Templatecookie Adlisting version 2.14.0, classified as problematic. It affects an unknown function of the file /ad-list of the Redirect Handler component, leading to information disclosure.

A vulnerability was found in Media Browser Emby Server 4.7.13.0, leading to cross site scripting attacks. The issue affects some unknown processing of the file /web/ and may be exploited remotely.

A critical vulnerability has been found in Tongda OA affecting unknown code in the file general/system/seal_manage/dianju/delete_log.php. Manipulation of the argument DELETE_STR leads to SQL injection.

A critical vulnerability was found in Tongda OA affecting the file general/system/seal_manage/iweboffice/delete_seal.php. Manipulation of the argument DELETE_STR leads to SQL injection.

A vulnerability in Apache Airflow allows authenticated users to bypass some restrictions, enabling code execution in the webserver context and access to certain DAGs that the user normally cannot access. The 'Run Task' feature has been deemed dangerous and removed in version 2.6.0.

A vulnerability in LangChain version 0.0.194 allows remote code execution via the from_math_prompt and from_colored_object_prompt functions in the PALChain class. An attacker can inject malicious Python code through the eval mechanism.

Version 1.0 of ShuiZe_0x727 was found to contain a remote command execution (RCE) vulnerability via the component /iniFile/config.ini.

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.

LinuxASMCallGraph is software for drawing the call graph of the programming code. Versions before commit 20dba06bd1a3cf260612d4f21547c25002121cd5 allow attackers to cause remote code execution on the server side via uploading a crafted ZIP file due to incorrect filtering rules of uploaded files.

The social-media-skeleton project has a SQL injection vulnerability that allows UNION based injections, which indirectly leads to remote code execution. A fix has been introduced in commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1.

PHPGurukul Online Security Guards Hiring System version 1.0 is vulnerable to SQL Injection via osghs/admin/search.php.

Knowage is an open source analytics and business intelligence suite. In versions from 6.x.x to prior to 8.1.8, the endpoint `/knowage/restful-services/dossier/importTemplateFile` allows authenticated users to upload template files to the server without requiring authorization, enabling code execution on the server.

In versions prior to 1.0.1, matrix-appservice-irc allowed crafting an event that could leak part of a message from another bridged room. This required knowing the event ID to target.

The GitHub repository omeka/omeka-s prior to version 4.0.3 has a vulnerability that allows unrestricted file uploads of dangerous types.

CVE-2023-4158 involves a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository omeka/omeka-s prior to version 4.0.3.

CVE-2023-4157 concerns improper neutralization of special elements in output used by a downstream component in the GitHub repository omeka/omeka prior to version 4.0.3.

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

MindsDB's AI Virtual Database prior to version 23.7.4.0 allowed disabling SSL certificate verification using `verify=False`. In version 23.7.4.0, SSL certificate verification is enabled by default, which is the desired behavior.

The Ethereum Name Service (ENS) has a vulnerability that allows an attacker to reduce the expiration time of existing domains due to an integer overflow in the renew function. This issue exists in versions prior to 0.0.22 of the `@ensdomains/ens-contracts` package.