CVE Vulnerability Catalog

D-Link DIR-868L with firmware version fw_revA_1-12_eu_multi_20170316 was found to contain a buffer overflow vulnerability in the FUN_0000acb4 function via the param_2 parameter.

D-Link DIR-842 with firmware version fw_revA_1-02_eu_multi_20151008 was found to contain multiple buffer overflows in the fgets function triggered by the acStack_120 and acStack_220 parameters.

D-Link DIR-868L with firmware version fw_revA_1-12_eu_multi_20170316 was found to contain a buffer overflow via the acStack_50 parameter.

A vulnerability in the Dispatch tool allows the JWT secret key to be exposed in error messages, potentially leading to account takeover for users relying on the `Dispatch Plugin - Basic Authentication Provider`.

CVE-2023-39970 vulnerability affects the AcyMailing component for Joomla, allowing unrestricted upload of files with dangerous types, leading to remote code execution.

XWiki Platform allows users who can view `Invitation.WebHome` to execute arbitrary script macros, including Groovy and Python, leading to remote code execution. This vulnerability allows unrestricted read and write access to all wiki contents.

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.

A Prototype Pollution vulnerability was found in Tree-kit library version 0.7.4 and earlier. It allows a remote attacker to execute arbitrary code via the extend function.

IBM Security Guardium versions 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

The Campcodes Online Matrimonial Website System Script 3.3 has an XSS vulnerability that can be exploited via a crafted SVG document in the upload module.

The 'Customization fields fee for your store' (aicustomfee) module in the ai-dev module for PrestaShop is vulnerable to SQL injection up to version 0.2.0. Version 0.2.1 has fixed this security issue.

A Directory Traversal vulnerability in the Server functionality of Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.

Version 1.0 of webchess was found to contain a SQL injection vulnerability via the $playerID parameter in mainmenu.php. However, there is controversy regarding this vulnerability as a third party claims that playerID is a session variable controlled by the server, making it impossible to exploit.

Version 1.3 of Schoolmate was found to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters in DeleteFunctions.php.

Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. There is a dispute regarding whether the userid is a session variable controlled by the server.

COMFAST CF-XR11 version V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameters interface and display_name.

Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function in the bin/webmgnt file.

The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to set up CIM connection.

The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.