CVE Vulnerability Catalog

CVE-2023-40980 in DWSurvey DWSurvey-OSS version 3.2.0 and earlier allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

Version 0.0.245 of the LanChain-ai Langchain library contains a vulnerability that allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Integer Overflow vulnerability in mp_grow in libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9 allows attackers to execute arbitrary code and cause a denial of service (DoS).

CVE-2023-36327 describes an integer overflow vulnerability in the RELIC library before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allowing attackers to execute arbitrary code and cause a denial of service in the pos argument of the bn_get_prime function.

An Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling the realloc function in the bn_grow function.

CVE-2023-36187 describes a buffer overflow vulnerability in NETGEAR R6400v2 devices before version 1.0.4.118, allowing remote unauthenticated attackers to execute arbitrary code via a crafted URL to httpd.

An issue was discovered in IceCMS version 2.0.1, allowing attackers to escalate privileges and gain sensitive information via the UserID parameter in api/User/ChangeUser.

Version 3.1.9 and earlier of smanga contains an SQL Injection vulnerability that allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.

In versions of tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

Improper access control exists in the GitHub repository usememos/memos prior to version 0.13.2.

The Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

There is a remote command execution vulnerability due to improper input validation. This affects Acronis Cloud Manager (Windows) before build 6.2.23089.203.

There is a remote command execution vulnerability due to improper input validation. This affects Acronis Cloud Manager (Windows) before build 6.2.23089.203.

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.

CVE-2023-41636 describes a SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38, allowing attackers to access the database and execute arbitrary commands via a crafted SQL query.

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to and including 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin.

find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input, leading to a command injection vulnerability.

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_7D858'.

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.