CVE Vulnerability Catalog

A vulnerability was found in ImageMagick that leads to a remote code execution vulnerability in OpenBlob when the --enable-pipes option is configured.

A vulnerability was found in ImageMagick, occurring due to undefined behaviors of casting double to size_t in svg, mvg and other coders. This is a recurring bug related to CVE-2022-32546.

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code.

Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can inject malicious Javascript into a comment, which executes in the browser of another user.

Macrovideo v380pro version 1.4.97 shares the device id and password when sharing the device.

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification of the Verify parameter in a warning message.

BlueCMS version 1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.

Xibo is a content management system (CMS) that in versions from 3.0.0 to 3.3.5 reveals sensitive information by printing stack traces when certain API routes are called with missing or invalid parameters. Users should upgrade to version 3.3.5, which fixes this issue.

An SQL injection vulnerability was discovered in the Xibo content management system in the `/display/map` API route, affecting versions from 3.2.0 to 3.3.2. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values into the `bounds` parameter.

An SQL injection vulnerability was discovered in the `nameFilter` function in the Xibo content management system, affecting versions from 3.2.0 to 3.3.5. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators.

An SQL injection vulnerability was discovered in the Xibo content management system in the `/dataset/data/{id}` API. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values into the `filter` parameter.

A path traversal vulnerability exists in the Xibo CMS that allows an authenticated user to upload a specially crafted zip file. This can lead to the creation of files outside the CMS library directory, enabling remote code execution.

RIOT-OS, an operating system for IoT devices, contains a network stack capable of processing 6LoWPAN frames. In version 2023.01 and prior, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer.

A memory leak vulnerability exists in NanoMQ version 0.17.2. The issue is located in the file message.c and could be exploited by an attacker to perform a denial of service attack by consuming all available memory resources.

RIOT-OS, an operating system for IoT devices, contains a network stack capable of processing 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device, triggering a race condition that leads to invalid memory access and denial of service.

RIOT-OS, an operating system for IoT devices, contains a network stack capable of processing 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send a crafted frame, leading to a NULL pointer dereference and crashing the device, resulting in denial of service.

Arbitrary code execution vulnerability in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows changing XCom sidecar image and resources via Airflow connection. Exploitation requires elevated permissions (Op or Admin).

Minio Console, the UI for MinIO Object Storage, is vulnerable to the use of Unicode RIGHT-TO-LEFT OVERRIDE characters, allowing the original filename to be masked.

Kyverno is a policy engine designed for Kubernetes. Seccomp control in Kyverno can be circumvented, affecting users of the `validate.podSecurity` subrule in versions 1.9.2 and 1.9.3. This issue was patched in version 1.9.4.

A vulnerability in Emby Server may allow administrative access to the system, depending on user account settings. An attacker could spoof headers, enabling passwordless login or viewing a list of user accounts that may not have a password configured.