CVE Vulnerability Catalog

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

Affected TBox RTUs store hashed passwords using MD5 encryption, which is considered insecure.

Knowage is a professional open source suite for data analytics that has a vulnerability in versions 6.x.x and prior to 8.1.8. It allows authenticated users to download template files, but the lack of sanitization of the '_templateName_' parameter enables attackers to download any file from the system.

An out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to version 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device.

2FA is a web application for managing Two-Factor Authentication (2FA) accounts and generating security codes. Cross site scripting (XSS) injection can be performed via the account/service field.

An unquoted Windows search path vulnerability existed in the install service of MOVE 4.10.x and earlier versions. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path, leading to privilege escalation and the ability to stop antimalware services.

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.

Gradle has a path traversal vulnerability when unpacking Tar archives, which may lead to overwriting important files in locations where the Gradle process has write permissions. An attacker can exploit this flaw by controlling the source of an archive or modifying the build to interact with a malicious archive.

Gradle, a build automation tool, has a vulnerability that allows files to be written to unintended locations in the filesystem through specially crafted dependency coordinates. This could lead to poisoning the dependency cache or overwriting important files.

Hnswlib version 0.7.0 has a double free in init_index when the M argument is a large integer.

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker can craft a PDF that leads to unexpected long runtime, blocking the current process and utilizing 100% of a single CPU core.

The pypdf library in version 2.10.5 contains a vulnerability that allows an attacker to craft a PDF leading to an infinite loop. This loop blocks the current process and utilizes 100% of a single CPU core.

In pacparser before version 1.4.2, there is a vulnerability in the pacparser_find_proxy function that allows JavaScript injection, potentially leading to privilege escalation if the attacker controls the URL.

In MISP before version 2.4.172, the title_for_layout parameter is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.

An issue was discovered in the ProofreadPage extension for MediaWiki through version 1.39.3, which may expose hidden users via public interfaces.

An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3 that allows XSS via the column alignment feature.

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through version 1.39.3, allowing XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate for quotes that can be in a title attribute.

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the intended interaction with AbuseFilter does not occur.

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibility of hidden users.

The angular-ui-notification library versions 0.1.0, 0.2.0, and 0.3.6 were found to contain a cross-site scripting (XSS) vulnerability.