CVE Vulnerability Catalog

Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. This could allow other local users to modify the source code compiled and executed by the current user.

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, leading to sensitive information leakage by attackers.

HedgeDoc prior to version 1.9.9 allowed the creation of notes with an alias matching the ID of existing notes, effectively hiding the original notes. Users could exploit this vulnerability to manipulate note content and prevent access to original notes.

In the Nuclei project, prior to version 2.9.9, there was a security issue affecting users utilizing Nuclei as Go code (SDK) running custom templates. This issue was related to sanitization problems with payload loading in sandbox mode, potentially allowing arbitrary files to be read from the filesystem.

Metabase, an open-source analytics platform, prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4, contained a vulnerability that could allow remote code execution on the Metabase server. The issue stemmed from the ability to inject code into the connection string for the H2 database, which could lead to the execution of that code by the process running the embedded database.

The Aerospike Java client prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 deserializes Java objects from server responses without proper validation. Attackers can exploit this vulnerability to inject malicious code, potentially taking control of the client machine.

A heap out-of-bounds memory read flaw was found in the virtual NVMe device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which can lead to the disclosure of arbitrary heap memory relative to an allocated buffer.

VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.

VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.

Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext form in the product's maintenance data (ismsnap). As a result, the password for the proxy server configured in ISM may be retrieved.

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 7.9.8 via the '->cus1' parameter. This allows authenticated attackers with author-level permissions or above, if the administrator previously grants access in the plugin settings, to execute code on the server.

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 7.9.8 via the '->cus2' parameter. This allows authenticated attackers with author-level permissions or above, if the administrator previously grants access in the plugin settings, to create a PHP file and execute code on the server.

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to and including 7.9.8 due to insufficient restriction on the 'get_header_values' function. This allows authenticated attackers with minimal permissions, such as an author, to modify their user role.

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to and including 7.9.8. This allows unauthenticated attackers to list and view exported files.

An issue has been discovered in GitLab EE affecting all versions from 14.1 before 16.0.8, from 16.1 before 16.1.3, and from 16.2 before 16.2.2. EE-licensed users could link any security policy project by its ID to projects or groups they have access to, potentially revealing the security project's configured security policies.

Sulu is an open-source PHP content management system based on the Symfony framework. The Admin Login form allows detection of which user (username, email) exists and which does not.

Pimcore has a path traversal vulnerability in the `AssetController::importServerFilesAction`, allowing an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.

The CVE-2023-3373 vulnerability in the GT21 and GS21 models of the GOT2000 and GOT SIMPLE series allows a remote unauthenticated attacker to hijack data connections or prevent legitimate users from establishing connections by guessing the listening port on the FTP server.

An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.

Version django-sspanel v2022.2.2 was found to contain a remote command execution (RCE) vulnerability in the component sspanel/admin_view.py in the GoodsCreateView._post method.