CVE Vulnerability Catalog

Buffer overflow in ANGLE in Google Chrome on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

A buffer overflow vulnerability in the Tint component of Google Chrome on Android prior to 154.0.8037.57. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use-after-free vulnerability in Platform component of Google Chrome prior to 154.0.8037.57. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page.

A buffer overflow vulnerability in the ANGLE component of Google Chrome on Android prior to 154.0.8037.57. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.

Race condition vulnerability in V8 component of Google Chrome prior to 154.0.8037.57. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page.

UI misrepresentation in Omnibox in Google Chrome on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low.

Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page.

A use after free vulnerability in the Views component of Google Chrome prior to 154.0.8037.57. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Improper input validation vulnerability in Themes component of Google Chrome prior to 154.0.8037.57. A remote attacker who compromised the renderer process could execute arbitrary code inside the sandbox via crafted network traffic.

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page.

Improper output encoding vulnerability in DevTools component of Google Chrome prior to 154.0.8037.57. A remote attacker who compromised the renderer process could execute arbitrary code outside the sandbox via a crafted HTML page.

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter (access-control / URL filter configuration handler) and is triggered by the url request parameter when the addFilterUrl (or addFilterUrlFlag) action flag is set.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this to delete files, potentially causing denial of service or impacting system integrity.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as OS commands by the SNMP alerter service, which runs with root privileges.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality. A privileged authenticated CLI user can execute arbitrary commands with root privileges.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability that allows a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a vulnerability that allows a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms.

Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Attackers can exploit unsanitized path parameters in handle_create_content and handle_clone_content to write files outside the project directory via directory traversal.