CVE Vulnerability Catalog

HCL MyCloud was affected with a weak password policy, increasing the risk of account compromise through brute-force or credential-based attacks.

Missing X-Content-Type-Options header in HCL IEM allows attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.

Missing Anti Clickjacking X-Frame-Options header in HCL IEM allows attackers to embed the application in malicious pages and induce unauthorized user actions.

A logic error in libssh's automatic certificate-based public key authentication causes libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.

HCL IEM does not enforce strict transport security (HSTS), allowing attackers to perform SSL stripping or man-in-the-middle attacks, compromising secure communications.

HCL IEM was affected with an information disclosure issue in the nginx server, which may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.

A flaw in libssh: a malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

In libssh, during server-side GSSAPI key exchange, a short Curve25519 public key is copied without proper length validation, causing an out-of-bounds heap read.

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nni_mqttv5_msg_decode_connect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client (including bridge mode) with a single packet, causing remote denial of service via SIGSEGV. The issue occurs because the code uses variable 'prop' instead of 'will_prop' when iterating over CONNECT properties.

HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.

The All in One SEO WordPress plugin before version 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.

A vulnerability was found in hunvreus devpush up to version 0.4.6 in the reset_storage function of the file app/workers/tasks/storage.py. The issue involves improper check or handling of exceptional conditions, which could lead to unexpected behavior.

A vulnerability in django-blog-zinnia up to version 0.20 stores protected entry passwords in cleartext within the file zinnia/views/mixins/entry_protection.py. The issue affects the Protected Entry Password Handler component and requires local access to exploit. The project has not responded to the report.

A race condition vulnerability was found in the Hostname Allocation Handler component of the allegro project (up to version bcf65b994ef29fb3fc2e10b660e6288723d5209e) in the AssetLastHostname.increment_hostname function. The attack requires manipulation of the counter argument, is highly complex, and considered difficult to exploit. The exploit has been publicly disclosed and may be used, while the project has not responded to the issue report.

A vulnerability was found in django-tastypie up to version 0.15.1 in the ApiKeyAuthentication function within tastypie/authentication.py. The issue involves using the GET method with sensitive query strings, potentially leaking API keys. The attack is remote but has high complexity and is considered difficult to exploit.

A cross-site scripting vulnerability has been found in Pluck CMS up to version 4.7.21 in the Albums module. The htmlspecialchars_decode function in data/modules/albums/albums.admin.php mishandles the Info argument, allowing remote injection of malicious scripts. The exploit is public, and the project has not responded to the report.

A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /forCYS.php file. Manipulation of the course argument allows remote injection of malicious scripts. The exploit is publicly available.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0, allowing XSS in /CYS.php via the course argument. The attack is remotely exploitable and the exploit is public.

A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /forexam.php. Manipulating the day argument allows remote script execution. The exploit has been publicly disclosed.

A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /schoolyr.php. Manipulating the sy argument allows remote script execution. The exploit has been publicly disclosed.