CVE Vulnerability Catalog

CVE-2023-38697 affects the HTTP/1 protocol implementation in the protocol-http1 library, which does not comply with RFC 9112 specifications regarding Content-Length and chunk size headers. Improper acceptance of header values can lead to desynchronization when forwarding through multiple HTTP parsers, creating risks of HTTP request smuggling and firewall bypassing.

Cypress-image-snapshot before version 8.0.2 allowed users to pass relative file paths for snapshot names, enabling access to files outside the project directory on the machine running the tests.

CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management.

Zoho ManageEngine ADManager Plus version 7201 allows authenticated users to take over another user's account via sensitive information disclosure.

Connected IO version 2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication. This allows devices to connect to the broker and issue commands to other devices, impersonating the Connected IO management platform.

Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command, allowing attackers to execute arbitrary OS commands on devices.

Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices.

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.

Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use them to impersonate the devices.

Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware for device communication using MQTT. An attacker who gains access to these credentials can connect to the MQTT broker and send messages on behalf of devices, impersonating them.

PaperCut NG and PaperCut MF before version 22.1.3 on Windows allow attackers to perform path traversal, enabling them to upload, read, or delete arbitrary files. This can lead to remote code execution when external device integration is enabled.

ECShop version 4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.

In versions 4.0.0 to 8.1.1, the matrix-appservice-bridge library allows a malicious Matrix server to use a foreign user's MXID in an OpenID exchange, enabling impersonation of users via the provisioning API.

In versions prior to 1.0.1 of matrix-appservice-irc, an IRC bridge for Matrix, it is possible to craft a command with newlines that would not be properly parsed. This allows passing a string of commands as a channel name, which could then be executed by the IRC bridge bot.

Logistics Pipes is a modification for Minecraft Java Edition that contains a vulnerability allowing remote code execution due to the use of `ObjectInputStream#readObject` on untrusted data. The issue affects versions from 0.7.0.91 to 0.10.0.71, which were available for download between 2013 and 2016.

twitch-tui, a tool for handling Twitch chat in the terminal, prior to version 2.4.1 did not use TLS for communication. In the irc connection configuration, the software disables TLS, resulting in unencrypted communication with Twitch IRC servers.

A cross-site scripting (XSS) vulnerability was discovered in Creative Item Academy LMS version 6.0.

Sydent, an identity server for the Matrix communications protocol, prior to version 2.5.6, did not verify SMTP servers' certificates when sending emails using TLS. This makes Sydent's emails vulnerable to interception via a man-in-the-middle (MITM) attack.