CVE Vulnerability Catalog

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, allowing for the storage of malicious code.

In the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, there is improper neutralization of formula elements in a CSV file.

Insufficient session expiration exists in GitHub repository fossbilling/fossbilling prior to version 0.5.5.

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing 'dot dot' sequences (/../) to view arbitrary files on the system.

CVE-2023-37219 concerns improper neutralization of formula elements in a CSV file in Tadiran Telecom Composit. This may lead to unauthorized code execution or data manipulation.

CVE-2023-37218 affects the Tadiran Telecom Aeonix system and involves improper limitation of a pathname to a restricted directory, potentially leading to a 'Path Traversal' attack. An attacker could gain access to files outside the allowed directory.

Vulnerability in Tadiran Telecom Aeonix related to observable response discrepancies, which may lead to information disclosure.

In the AnaSystem SensMini M4 device, an authenticated user can cause a Denial of Service using the configuration tool.

CVE-2023-37215 affects the JBL multibeam 5.1 soundbar, which uses hard-coded credentials. This may allow unauthorized access to the device.

CVE-2023-37214 affects the Heights Telecom ERO1xS-Pro device with firmware version FW BZ_ERO1XP.025. This issue may lead to unauthorized access or other security-related threats.

CVE-2023-37213 affects Synel SYnergy fingerprint terminals, which are vulnerable to 'OS Command Injection' attacks. An attacker can exploit this vulnerability to execute unauthorized system commands.

Apache NiFi versions 0.0.2 through 1.22.0 include processors and controller services that support HTTP URL references for retrieving drivers, allowing an authenticated and authorized user to configure a location that enables custom code execution.

In Google Chrome prior to version 114.0.5735.90, there was a vulnerability related to out of bounds read and write in ANGLE, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page.

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, unauthorized users could obtain information about restricted-visibility topic tags.

Discourse is an open source discussion platform that prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches did not impose an upper limit on limit parameters in multiple controller actions. This lack of restriction may allow users to generate database queries that could exhaust server resources.

Discourse is an open source discussion platform, where prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can delay the defer queue processing on sites hosted in the same multisite installation.

Discourse is an open source discussion platform, where prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can edit a post in a topic and cause a DoS with a carefully crafted edit reason.