CVE Vulnerability Catalog

Cross-Site Scripting (XSS) vulnerability in Gazie 7.29 allows an attacker to inject JavaScript code via the 'user_name' parameter in admin_utente.php. The injected code is stored persistently by the application.

Zidentyfikowano podatność w rodzinie CPU SIMATIC S7-300, S7-400, WinAC RTX (F) 2010 oraz SINUMERIK 840D sl. Protokół uwierzytelniania między klientem a PLC przez port 102/tcp (ISO-TSAP) niewystarczająco chroni przesyłane hasło.

A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter.

Stored XSS vulnerability in Spiceworks version 7.5.00107 and earlier. An attacker can inject malicious JavaScript via the name field in the Custom Groups function, which is displayed without sanitization on the /inventory/groups/ page.

An XSS vulnerability in osTicket before version 1.14.3 allows an attacker to inject malicious script via a crafted filename uploaded to the _uploadInlineImage() function in include/ajax.draft.php.

An XSS vulnerability in osTicket before version 1.14.3 exists due to missing input validation in include/staff/banrule.inc.php, where the echo statement outputs $info['notes'] without sanitization. An attacker can inject malicious JavaScript code that executes in other users' browsers.

Występuje podatność na zdalne wykonanie kodu w bibliotece kodeków Microsoft Windows, związana z obsługą obiektów w pamięci. Atakujący, który skutecznie wykorzysta tę podatność, może wykonać dowolny kod, pod warunkiem, że program przetworzy specjalnie przygotowany plik graficzny.

In Apache ActiveMQ Artemis versions 2.5.0 to 2.13.0, there is an XSS vulnerability that can be exploited through a specially crafted MQTT packet containing an XSS payload in the client-id or topic name. The XSS payload is injected into the admin console's browser.

An issue was discovered in MISP version 2.4.128, where app/Controller/EventsController.php lacks an event ACL check before allowing a user to send an event contact form.

A flaw was found in ActiveMQ Artemis from versions 2.7.0 to 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.

In MISP versions before 2.4.126, there is an XSS vulnerability in the resolved attributes view in app/View/Events/resolved_attributes.ctp.

A vulnerability in the Snort detection engine of multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured file policies. The issue is due to errors in how Snort handles specific HTTP responses. An attacker could send crafted HTTP packets through an affected system, potentially bypassing policies and delivering a malicious payload.

A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch. This is due to improper verification of digital signatures for patch images. An attacker could exploit this by crafting an unsigned patch to bypass signature checks, potentially booting a malicious patch image.

A vulnerability in the TLS 1.3 policy with URL category functionality for Cisco FTD Software could allow an unauthenticated, remote attacker to bypass a configured TLS 1.3 policy to block traffic for a specific URL. The issue is due to a logic error with Snort handling of the connection with the TLS 1.3 policy and URL category configuration. An attacker could exploit this by sending crafted TLS 1.3 connections, bypassing the policy and accessing URLs that would normally be dropped.

A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. This is due to improper configuration of the support tunnel feature. An attacker could enable the support tunnel, set a key, and derive the tunnel password, allowing them to run any system command with root access.

A vulnerability in how Cisco FTD Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections, leading to a DoS condition. The issue is that the default session timeout period for specific to-the-box remote management connections is too long. An attacker could exploit this by sending a large and sustained number of crafted remote management connections.

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list. The issue is due to inconsistent configuration of access lists. An attacker could send crafted remote management traffic to the local IP address, bypassing the policies.

Vulnerability in PeopleSoft Enterprise CS Campus Community product (component: Self-Service) version 9.2. Allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data, potentially impacting additional products.

W Arm Mbed TLS przed wersją 2.16.6 oraz 2.7.x przed wersją 2.7.15 odkryto problem, który pozwala atakującemu na odzyskanie długoterminowego klucza prywatnego ECDSA. Atak opiera się na pomiarach bocznych, które umożliwiają rekonstrukcję współrzędnych projektowych oraz wykorzystanie ataków do uzyskania klucza prywatnego.

In MISP before version 2.4.124, the file app/Model/feed.php allows administrators to choose arbitrary files for ingestion. This does not leak the full contents of a file but can leak strings that match certain patterns, such as passwords from database.php or GPG key passphrases from config.php.