CVE Vulnerability Catalog

CVE-2023-34143 describes an improper validation of certificate with host mismatch vulnerability in Hitachi Device Manager on Windows and Linux. This allows for a Man in the Middle attack, potentially leading to data interception.

CVE-2023-34142 involves the cleartext transmission of sensitive information in Hitachi Device Manager on Windows and Linux. The issue affects Device Manager Server, Device Manager Agent, and Host Data Collector components and is present in versions before 8.8.5-02.

An issue was discovered in the Linux kernel before 6.3.10 related to the validation of command payload size in ksmbd, leading to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.8 related to the lack of validation of the NetBIOS header's length in relation to SMB header sizes in ksmbd. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before version 6.3.9, where ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.4 related to an off-by-one error in memory allocation in fs/ksmbd/connection.c, which may lead to out-of-bounds access.

An issue was discovered in the Linux kernel before version 6.3.4 in fs/ksmbd/smb2pdu.c, which does not properly check the UserName value. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.8 related to integer underflow and out-of-bounds read in the deassemble_neg_contexts function in fs/smb/server/smb2pdu.c in ksmbd.

An issue was discovered in the Linux kernel before version 6.3.4 related to an out-of-bounds read in smb2_find_context_vals. This occurs when the name_len of create_context is larger than the tag length.

Open Enclave SDK version 0.19.3 addresses two vulnerabilities. The first concerns improper sanitization of the `MXCSR` register on enclave entry, which can lead to MCDT attacks. The second involves the lack of sanitization of the `RFLAGS.AC` flag, allowing attackers to monitor unaligned memory accesses.

CVE-2023-3724 affects TLS 1.3 clients that do not receive a PSK or KSE extension when connecting to a malicious server. In this case, a default predictable buffer is used for the IKM value, which may lead to session key compromise.

An issue was discovered in set_con2fb_map in the Linux kernel before version 6.2.12. The problem is that an assignment occurs only for the first vc, which can lead to desynchronization of the fbcon_registered_fb and fbcon_display arrays.

OpenRefine is a free, open source tool for data processing that contains a vulnerability allowing arbitrary code execution in the context of the OpenRefine process. A malicious OpenRefine project tar file can be exploited if a user is convinced to import it.

On Crestron 3-Series Control Systems before version 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before version 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file, leading to command execution on the remote server.

In iperf3 versions before 3.14, a vulnerability allows peers to cause an integer overflow and heap corruption via a crafted length field.

CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as `root` on CasaOS instances.

CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification, unauthenticated attackers can execute arbitrary commands as `root` on CasaOS instances.

An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.

The discovered faust commit ee39a19 contains a stack overflow in the component boxppShared::print() at /boxes/ppbox.cpp.