CVE Vulnerability Catalog

Dcat-Admin up to version 2.2.3-beta has a vulnerability in the editorMDUpload function on the user settings page. Manipulation of the editormd-image-file argument leads to unrestricted file upload. The attack can be remote.

A least privilege violation was discovered in the vsftpd component of TOTOLINK EX200 router version 4.0.3c.7646. Manipulation of the /etc/vsftpd.conf file allows remote exploitation. A public exploit is available.

Dolibarr ERP CRM up to version 23.0.2 has a vulnerability in the Legacy Filemanager component in the file htdocs/core/filemanagerdol/connectors/php/config.inc.php. An unknown function leads to improper authorization. The attack can be performed remotely, and the exploit is publicly available. A patch is available in version 23.0.3.

Stored XSS vulnerability in the Accordions plugin for WordPress, in the Accordion body field. Insufficient input sanitization and output escaping allow authenticated attackers with Custom-level access or higher to inject arbitrary scripts that execute when a user visits the page.

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user's browser within the application context. Low impact on confidentiality and integrity, no impact on availability.

SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters from authenticated users, resulting in an email spoofing vulnerability. This has low impact on integrity and does not affect confidentiality or availability.

The RFC modules in SAP ODP-RPC lack caller identification for permitted SAP-internal applications and are used by customer or third-party applications in unintended ways, potentially leading to unintended data disclosure, without affecting integrity and with minimal availability impact.

Missing authorization checks in SAP MDG (Review Match Groups) for authenticated users. A low-privileged user can perform restricted actions, leading to privilege escalation. Integrity impact is low, confidentiality and availability are unaffected.

SAP NetWeaver JAVA (JDBC Test Servlet) contains a reflected XSS vulnerability that allows an unauthenticated attacker to craft a URL embedding a malicious script. If a victim clicks the link, the injected input is processed during page generation, leading to script execution in the victim's browser. The attacker can access and/or modify webclient-related information, impacting confidentiality and integrity, with no impact on availability.

SAP S/4HANA (On-Premise) has an SQL injection vulnerability in a remote-enabled function module. An authenticated attacker can execute unauthorized database queries, exposing sensitive information.

SAP Fiori Launchpad allows attackers to craft malicious URLs that trigger arbitrary service calls on the Fiori domain. When opened by the user, this could compromise accounts by stealing user credentials. Successful exploitation requires advanced system knowledge, with low impact on confidentiality and integrity. System availability is not affected.

Google Chrome prior to version 149.0.7827.103 has an inappropriate implementation in Guest View, allowing a remote attacker to perform UI spoofing via a crafted HTML page. (Severity: Medium)

Google Chrome on Windows prior to version 149.0.7827.103 has an Uninitialized Use vulnerability in the Video component. A remote attacker who compromised the renderer process can obtain potentially sensitive information from process memory via a crafted HTML page.

Google Chrome prior to version 149.0.7827.103 has an inappropriate implementation in Passwords, allowing a remote attacker to leak cross-origin data via a crafted HTML page. (Severity: High)

Google Chrome on Mac prior to version 149.0.7827.103 has an inappropriate implementation in MediaCapture, allowing a remote attacker to leak cross-origin data via a crafted HTML page. (Severity: High)

Google Chrome prior to version 149.0.7827.103 has an integer overflow in libyuv, allowing a remote attacker who compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Severity: High)

Out-of-bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High).

Google Chrome on Linux and ChromeOS prior to version 149.0.7827.103 has an Uninitialized Use vulnerability in the Codecs component. A remote attacker can leak cross-origin data via a crafted video file.

Insufficient validation of untrusted input in the Input component of Google Chrome prior to 149.0.7827.103 allows a remote attacker to perform UI spoofing via a crafted HTML page.

Google Chrome on Windows prior to version 149.0.7827.103 has an out-of-bounds read vulnerability in the Dawn component. A remote attacker can leak cross-origin data via a crafted HTML page.