CVE Vulnerability Catalog

Vulnerability related to configuration defects in the media module of certain products. Successful exploitation of this vulnerability may lead to unauthorized access.

Vulnerability related to out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may lead to other apps being executed with escalated privileges.

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to and including 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled.

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. This issue exists because of an incomplete fix for CVE-2022-24439.

EmpowerID versions before 7.205.0.1 allow an attacker to bypass MFA requirements if the first factor (username and password) is known. Knowing the first factor enables changing the account's email address, to which MFA codes are then sent.

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar files, insufficient length checking may lead to a stack buffer overflow, potentially resulting in memory corruption or RCE.

A vulnerability was discovered in Veritas NetBackup Snapshot Manager before version 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service.

A SQL injection vulnerability was discovered in iCMS v7.0.16 within the bakupdata function. Attackers can exploit this flaw to execute unauthorized database queries.

A SQL injection vulnerability was discovered in iCMS version 7.0.16 via the 'where' parameter in admincp.php. An attacker can exploit this flaw to execute unauthorized database queries.

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).

All UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring enabled and default settings are vulnerable to an integer overflow, potentially allowing Remote Code Execution (RCE).

In version 1.0 of PHPJabbers Document Creator, there is a SQL injection (SQLi) vulnerability in the 'column' parameter of index.php.

CVE-2023-39776 describes a vulnerability in PHPJabbers Ticket Support Script v3.2 that allows attackers to execute arbitrary code by uploading a crafted file.

EZ softmagic MP3 Audio Converter version 2.7.3.700 was found to contain a buffer overflow vulnerability.

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection attacks, allowing an attacker to manipulate SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields.

Crypto wallets implementing the Lindell17 TSS protocol may allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt, totaling 256 bits. This issue arises from not adhering to the security proof's assumptions regarding handling aborts after a failed signature.

Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation.

KramerAV VIA Connect (2) and VIA Go (2) devices before version 4.0.1.1326 allow remote extraction of the connection confirmation code, bypassing the need for physical screen access and enabling remote device manipulation.

A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands.