CVE Vulnerability Catalog

A vulnerability was found in Bug Finder Finounce 1.0 affecting unknown processing of the file /user/ticket/create in the Ticket Handler component. Manipulation of the argument message leads to cross site scripting.

A vulnerability was found in Bug Finder SASS BILLER 1.0, rated as problematic. This issue affects some unknown processing of the file /company/store, leading to cross-site scripting attacks.

A vulnerability was found in Bug Finder ICOGenie 1.0 affecting unknown code in the /user/ticket/create file of the Support Ticket Handler component. Manipulation of the message argument leads to cross site scripting.

A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0, classified as problematic. It affects an unknown part of the file /listplace/user/coverPhotoUpdate of the Photo Handler component, where manipulation of the argument user_cover_photo leads to cross site scripting.

A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0, affecting some unknown functionality of the file /listplace/user/ticket/create in the HTTP POST Request Handler component. Manipulation of the argument message leads to cross-site scripting.

A critical vulnerability has been found in IBOS OA version 4.5.5, affecting an unknown functionality of the file /?r=recruit/resume/edit&op=status of the Interview Handler component. Manipulation of the argument resumeid leads to SQL injection.

In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, and 8.2.* before 8.2.7, when using SOAP HTTP Digest Authentication, the random value generator was not checked for failure and was using a narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

A vulnerability in the Linux kernel's net/sched: sch_qfq component allows for out-of-bounds writes, potentially leading to local privilege escalation.

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

A vulnerability has been found in Dapr that allows bypassing API token authentication. An attacker could craft a well-formed HTTP request that is accepted by Dapr, even if the API token is invalid or missing.

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, allowing them to gain admin rights by editing the `isadmin` value in the request.

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leaks password hashes of users, including admins, which may allow an attacker to crack them.

OpenDDS, an open-source C++ implementation of the Data Distribution Service (DDS), crashes while parsing a malformed PID_PROPERTY_LIST in a DATA submessage during participant discovery. Attackers can remotely crash OpenDDS processes by sending a DATA submessage containing the malformed parameter to the known multicast port.

An out-of-bounds write vulnerability on Windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.

A missing allocation check in the SFTP server processing read requests may lead to a NULL dereference under low memory conditions. A malicious client can request up to 4GB SFTP reads, potentially causing allocation of up to 4GB buffers without error checking.

The `ckeditor-wordcount-plugin` for CKEditor4 is susceptible to cross-site scripting (XSS) when switching to source code mode. This issue has been addressed in version 1.17.12 of the plugin.

vm2 is an open source vm/sandbox for Node.js. In versions up to and including 3.9.19, the inspect function in Node.js allows attackers to escape the sandbox and run arbitrary code.

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.