CVE Vulnerability Catalog

The vulnerability in ipl/web allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. Versions 0.13.1 and 0.10.3 contain patches that address this issue.

Cilium, a networking, observability, and security solution, prior to versions 1.17.15, 1.18.9, and 1.19.3, could output sensitive data when the cilium-bugtool was run against deployments with WireGuard encryption enabled.

In the New API artificial intelligence asset management system, prior to version 0.12.10, a vulnerability existed in the Stripe webhook handler that allowed an unauthenticated attacker to forge webhook events and credit arbitrary quota to their account without making any payment.

Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allowed attackers to trick authenticated administrators into performing unauthorized actions like system registration, plugin management, and configuration changes.

The SolidCAM-GPPL-IDE extension in versions from 1.0.0 to before 1.0.2 has a vulnerability that allows the processing of malicious .vmid files, potentially leading to local file disclosure and denial of service attacks.

In the Avo framework, prior to version 3.31.2, a broken access control vulnerability was identified in the ActionsController. It allows an authenticated user to execute any Action class on any resource, leading to privilege escalation and unauthorized data manipulation.

Ray is an AI compute engine that, from version 2.54.0 to before 2.55.0, registered custom Arrow extension types in PyArrow. As a result, when reading a Parquet file containing these types, arbitrary code execution is possible due to improper handling of metadata.

MailEnable Enterprise Premium w wersji 10.55 i wcześniejszych zawiera lukę w autoryzacji w mobilnym portalu WebAdmin, która pozwala atakującym na ominięcie kontroli uwierzytelniania poprzez ponowne wykorzystanie ciasteczek AuthenticationToken generowanych dla użytkowników o niskich uprawnieniach. Atakujący mogą uzyskać token z punktu logowania WebMail, używając parametru PersistentLogin i wykorzystać go w portalu WebAdmin do wykonywania działań administracyjnych z wysokimi uprawnieniami.

SmarterTools SmarterMail w wersjach przed 9560 zawiera podatność na lokalne włączenie pliku w punkcie końcowym API /api/v1/report/summary/{type}, co pozwala uwierzytelnionym użytkownikom na odczyt dowolnych plików .json w systemie. Atakujący mogą wykorzystać tę podatność w połączeniu z słabymi algorytmami szyfrowania i hardcodowanymi kluczami.

In the russh library, which is a Rust SSH client and server, prior to version 0.60.1, there is a pre-authentication denial-of-service vulnerability in the keyboard-interactive authentication handler. A malicious client can crash any russh-based server implementing this authentication by sending a single malformed packet.

An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2 that could allow arbitrary classes to be loaded and executed when processing JDBC connection URL parameters.

A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories. This can lead to DoS or local privilege escalation when an authenticated cPanel user places a symlink at a user-controlled legacy Nova path under their home directory.

Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.

Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can lead to arbitrary file read when a relative file path is passed.

Crypt::PasswdMD5 versions up to 1.42 for Perl generate insecure random values for salts. The built-in rand function is predictable and unsuitable for cryptographic use.

ZEBRA, a Zcash node written in Rust, prior to version 4.4.0 had a composite denial-of-service vulnerability in its block discovery process. An unauthenticated remote attacker could permanently halt new block discovery on a targeted node by exploiting three independent weaknesses.

The vulnerability in absinthe-graphql absinthe related to inefficient algorithmic complexity allows unauthenticated denial of service via quadratic fragment-name uniqueness validation.

A vulnerability in absinthe-graphql allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL. Multiple Blueprint.Draft.convert/2 implementations in Absinthe's SDL language modules call String.to_atom/1 on attacker-controlled names, leading to resource exhaustion.

i18next-http-middleware prior to version 3.9.3 passed user-controlled lng and ns values without proper sanitization, potentially allowing for path traversal or SSRF attacks.

In versions prior to 4.0.21, the locize client SDK registers a 'message' event handler that does not validate event.origin, allowing attackers to invoke internal handlers via crafted messages.