CVE Vulnerability Catalog

Cross Site Scripting (XSS) vulnerability in Sourcecodester Student Study Center Desk Management System version 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.

The vulnerability in the Shescape library for JavaScript may impact Windows users in a threaded context. It can lead to incorrect escaping for the wrong shell, allowing attackers to bypass protections.

Node-SAML is a SAML library not dependent on any frameworks that runs in Node. The lack of checking of current timestamp allows a LogoutRequest XML to be reused multiple times even when the current time is past the NotOnOrAfter.

Argo CD, a GitOps continuous delivery tool for Kubernetes, has a bug in versions starting from 2.6.0 that causes open web terminal sessions to not expire. This allows users to send websocket messages even after the token has expired.

OpenMNS Horizon versions 31.0.8 and earlier than 32.0.2 are vulnerable to XXE injection attacks in the file editor accessible to users with ROLE_FILESYSTEM_EDITOR privileges.

Apache Airflow and its SMTP and IMAP providers before specified versions are affected by the OpenSSL Certificate validation vulnerability. The default SSL context did not check the server's X.509 certificate, which could lead to the disclosure of mail server credentials or mail contents.

A flaw was found in ghostscript for Red Hat Enterprise Linux 8, where the fix for CVE-2020-16305 was not included as previously claimed. This issue affects the ghostscript package specifically.

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure.

The hcaptcha extension (also known as hCaptcha for EXT:form) before version 2.1.2 for TYPO3 has an issue with verifying that the required CAPTCHA field is submitted in the form data, allowing a remote user to bypass the CAPTCHA check.

An issue was discovered in MISP version 2.4.174 related to a reflected XSS vulnerability. The issue exists in app/Controller/DashboardsController.php via the id parameter during dashboard editing.

CVE-2023-40282 describes an improper authentication vulnerability in Rakuten WiFi Pocket devices, allowing a network-adjacent attacker to log into the Management Screen. This may lead to the exposure of sensitive information or changes to the device settings.

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory.

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 may allow an authenticated user to view sensitive information from installation logs.

A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.

The Cross-Site Scripting (XSS) vulnerability in CSZ CMS version 1.3.0 allows attackers to execute arbitrary code via a crafted payload in the Social Settings parameter.

All versions of Douran DSGate have an issue that allows a local authenticated privileged attacker to execute arbitrary code via the debug command.

IBM Robotic Process Automation server versions 21.0.0 through 21.0.7 could allow an authenticated user to view sensitive information from application logs.

A stack-based buffer over-read vulnerability in nasm version 2.16 allows attackers to cause a denial of service (crash).

A stack-based buffer over-read in the disasm function in nasm 2.16 allows attackers to cause a denial of service.

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.