CVE Vulnerability Catalog

In libarchive before 3.6.2, the software does not check for an error after calling calloc, which can return a NULL pointer, leading to a NULL pointer dereference.

The NdkAdvancedCustomizationFields plugin version 3.5.0 for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via the rotateimg.php file. An attacker can exploit this to send requests from the server to internal network resources.

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via URL parameters. An attacker can inject malicious script through the message and plug parameters in several application paths.

Fusiondirectory 1.3 suffers from improper session handling. This could allow an attacker to hijack user sessions or bypass authentication mechanisms.

The class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD versions up to 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. It is one of several implementations that can be used for loading the host keys of an SSH server.

A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7 and Liferay DXP 7.3 fix pack 2 through update 4 allows attackers to execute arbitrary SQL commands via a crafted payload injected into the `title` field of a friendly URL.

A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute.

Podatność w xterm przed wersją 375 umożliwia wykonanie kodu poprzez operacje związane z czcionkami, co może prowadzić do wykonania poleceń w trybie edycji linii vi w Zsh. Problem wynika z możliwości wystąpienia odpowiedzi OSC 50 zawierającej Ctrl-g.

A remote code execution (RCE) vulnerability was discovered in ESPCMS P8.21120101 within the IS_GETCACHE component. Attackers can exploit this flaw to execute arbitrary code on the server.

ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.

ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.

Wtyczka Web Stories dla WordPressa jest podatna na atak typu Server-Side Request Forgery w wersjach do 1.24.0 włącznie, z powodu niewystarczającej walidacji adresów URL dostarczanych przez parametr 'url' w punkcie końcowym REST API /v1/hotlink/proxy. Umożliwia to uwierzytelnionym użytkownikom wykonywanie żądań sieciowych do dowolnych lokalizacji z aplikacji webowej.

W wyniku niewłaściwej walidacji typów podczas analizy załączników w bibliotece Socket.io js, możliwe jest nadpisanie obiektu _placeholder, co pozwala atakującemu umieścić odniesienia do funkcji w dowolnych miejscach w powstałym obiekcie zapytania.

A vulnerability in Zalando Skipper version 0.13.236 allows Server-Side Request Forgery (SSRF). An attacker can send a malicious request that is executed by the server, potentially leading to unauthorized access to internal resources.

GNU Libtasn1 przed wersją 4.19.0 zawiera błąd off-by-one w sprawdzaniu rozmiaru tablicy, który wpływa na funkcję asn1_encode_simple_der.

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

A stack overflow vulnerability was discovered in the RevserveMem component of Acer Altos W2000h-W570h F4 R01.03.0018. This flaw allows attackers to cause a Denial of Service (DoS) by injecting crafted shellcode into the NVRAM variable.