CVE Vulnerability Catalog

SRS is a real-time video server that prior to versions 5.0.157, 5.0-b1, and 6.0.48 is vulnerable to drive-by command injection via its API. An attacker can send a request to the `/api/v1/snapshots` endpoint containing commands to be executed in the body of the POST request.

In JetBrains YouTrack versions before 2023.1.10518, a stored XSS vulnerability in the Markdown-rendering engine was present.

In JetBrains YouTrack versions before 2023.1.10518, a DoS attack was possible via Helpdesk forms.

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi versions 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors in Apache NiFi versions 1.8.0 through 1.21.0, allows an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.

The 'This Day In History' plugin versions <= 3.10.1 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

Wtyczka WP Abstracts w wersjach do 2.6.2 zawiera podatność na nieautoryzowane odzwierciedlone ataki typu Cross-Site Scripting (XSS). Atakujący może wykorzystać tę lukę do wstrzyknięcia złośliwego kodu JavaScript.

A critical vulnerability has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3, affecting an unknown functionality of the file /Log/Query. Manipulation of the arguments sidx/sord leads to SQL injection, which can be exploited remotely.

A vulnerability was found in Chengdu VEC40G 3.0 that allows remote denial of service by manipulating the 'restart' argument in the /send_order.cgi file. Inputting 'reboot' leads to system failure.

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request.

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2.

NanoMQ version 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.

NanoMQ version 0.17.5 has a heap-based buffer over-read in the conn_handler function of mqtt_parser.c when processing malformed messages.

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.

EyouCMS version 1.6.2 is vulnerable to Cross Site Scripting (XSS) attacks, which may allow attackers to inject malicious code into the application.

The git-url-parse crate through version 0.4.4 for Rust is vulnerable to a Denial of Service (DoS) attack via a crafted URL, leading to issues with URL normalization in lib.rs.

LabCollector versions 6.0 through 6.15 allows remote code execution. An authenticated low-privileged user can upload a PHP file and execute system commands.

SQL injection vulnerabilities have been found in the MOVEit Transfer web application before versions 2021.0.7, 2021.1.5, 2022.0.5, 2022.1.6, and 2023.0.2. An unauthenticated attacker could gain unauthorized access to MOVEit Transfer's database.

Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.