CVE Vulnerability Catalog

A prototype pollution vulnerability was discovered in stealjs library version 2.2.4 in the convertLater function in npm-convert.js. The issue is caused by the requestedVersion variable that can be manipulated by an attacker.

Podatność CVE-2022-34882 dotyczy Hitachi RAID Manager Storage Replication Adapter i pozwala zdalnym uwierzytelnionym użytkownikom na uzyskanie wrażliwych informacji poprzez komunikaty o błędach. Problem dotyczy wersji 02.01.04 przed 02.03.02 oraz 02.05.00 przed 02.05.01 na systemach Windows i Docker.

InfluxDB before version 1.8.10 does not enforce authentication, allowing unauthenticated attackers to execute arbitrary commands. The vendor notes that authentication is disabled by default and should be enabled for public endpoints.

W systemie zamawiania jedzenia online w wersji 1.0 odkryto podatność na atak typu SQL injection, która występuje w komponencie /dishes.php?res_id=.

Doctor's Appointment System 1.0 is vulnerable to incorrect access control in the file edoc/patient/settings.php. The lack of authorization allows an attacker to manipulate the id parameter, leading to unauthorized access to other patients' data.

A vulnerability in the firmware of Tenda AC6 (AC1200) v5.0 and below allows attackers to remove the Wi-Fi password and force the device into open security mode by sending a crafted packet to the goform/setWizard form.

An access control issue was discovered in the TOTOLINK A7000R router running firmware version V4.1cu.4134, specifically in the /cgi-bin/ExportSettings.sh script. Lack of proper authentication allows unauthorized access to export device settings.

A buffer overflow vulnerability exists in the Linksys E1200 router firmware version 1.0.04 in the ej_get_web_page_name function. An attacker can exploit this flaw to execute arbitrary code or cause a denial of service.

TRENDnet TEW733GR router version 1.03B01 is vulnerable to command injection in the /htdocs/upnpinc/gena.php script. An attacker can remotely execute arbitrary system commands without authentication.

A vulnerability in the firmware of D-Link DIR-615 router version 20.06 allows unauthenticated access to the WAN configuration page (wan.htm). This enables reading WAN settings and modifying data fields on the page.

TP-Link Archer A7 router with firmware Archer A7(US)_V5_210519 is vulnerable to command injection in /usr/bin/tddp. The program incorrectly uses part of the received data packet as part of a command, allowing an attacker to execute arbitrary commands on the device.

A remote command execution (RCE) vulnerability was discovered in Tenda AC18 with firmware version V15.03.05.05. An attacker can exploit this flaw to take control of the device without authorization.

An issue was discovered in taocms 3.0.2 in the website settings that allows arbitrary PHP code to be injected by modifying config.php.

W repozytorium GitHub cockpit-hq/cockpit przed wersją 2.2.2 występuje niewłaściwe usuwanie wrażliwych informacji przed ich przechowaniem lub transferem. Może to prowadzić do nieautoryzowanego dostępu do danych.

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.

An attacker who submits a crafted tar file with size in header struct being 0 may trigger a call to malloc(0) for the variable gnu_longlink, leading to an out-of-bounds read.

Zagrożone urządzenia nieprawidłowo sanitizują pole wejściowe. Może to pozwolić uwierzytelnionemu zdalnemu atakującemu z uprawnieniami administratora na wstrzyknięcie kodu lub uruchomienie powłoki systemowej z uprawnieniami roota.

zlib through version 1.2.12 has a heap-based buffer over-read or buffer overflow in the inflate function in inflate.c due to a large gzip header extra field. Only applications that call inflateGetHeader are affected.

In Bolt 5.1.7, the foldername parameter has incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via crafted input.

The Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.