CVE Vulnerability Catalog

H3C Magic R300 version R300-2100MV100R004 was found to have a stack overflow vulnerability via the ipqos_lanip_dellist interface at /goform/aspForm.

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DelSTList interface at /goform/aspForm.

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the EditvsList interface at /goform/aspForm.

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DelvsList interface at /goform/aspForm.

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.

A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, affects the new hardware AmpereOne. Spectre-BHB uses shared branch history to influence mispredicted branches within the victim's hardware context.

An issue was discovered in BMC Patrol before version 22.1.00 that allows the agent's configuration to be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key, which can lead to remote code execution.

An issue was discovered in BMC Patrol through version 23.1.00 that allows remote modification of the agent's configuration without authentication. Some SNMP-related configuration fields can lead to code execution when the agent is restarted.

An issue was discovered in the Linux kernel before version 6.3.3 related to an out-of-bounds read in the crc16 function in lib/crc16.c when called from fs/ext4/super.c. The problem arises from improper offset checking in the ext4_group_desc_csum function.

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.

The New Policy form in the Microworld Technologies eScan management console has a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

The 'GetUserCurrentPwd' function in Microworld Technologies eScan Management Console contains a privilege escalation vulnerability. This allows a remote attacker to retrieve the password of any user (admin or normal) in plain text format.

A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.

A stored XSS vulnerability was found in Collabora Online prior to versions 22.05.13, 21.11.9.1, and 6.4.27, allowing an attacker to inject malicious code via document names. When an administrator opened the admin console, the document name could be executed as a script, risking the leak of the JWT.

A vulnerability was found in gpt_academic version 3.37 and prior, allowing information disclosure through manipulation of the file argument in the Configuration File Handler component. This enables reading sensitive configuration files in some working directories.

Version 1.12 of the EDIMAX BR-6288ACL device was found to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.

Version 2.1.3 of the mp4v2 library was found to contain a memory leak in the MP4File::ReadString() function in mp4file_io.cpp.

Wtyczka Formcreator dla GLPI umożliwia tworzenie niestandardowych formularzy i zgłoszeń. Podatność na trwałe ataki XSS występuje w wersji 2.13.5 i wcześniejszych poprzez użycie znacznika `##FULLFORM##` do renderowania treści. Może to prowadzić do wykonania dowolnego kodu JavaScript w kontekście administratora lub technika.

An SQL injection issue was discovered in EaseProbe before version 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.