CVE Vulnerability Catalog

Open5GS up to version 2.7.7 has a vulnerability in the smf_nsmf_handle_created_data_in_vsmf function of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been published.

In Open5GS up to version 2.7.7, a vulnerability in the gsm_build_pdu_session_establishment_accept function of the SMF component allows manipulation leading to denial of service (DoS). The attack can be launched remotely, and the exploit is publicly available.

A security vulnerability has been detected in Tenda AC6 15.03.06.23. The function get_log_file in the file /goform/getLogFile of the httpd component is affected by OS command injection via manipulation of the argument wans.flag. The attack can be launched remotely and the exploit has been disclosed.

An OS command injection vulnerability was found in Tenda AC6 router version 15.03.06.23 in the formWifiApScan function of the /goform/WifiApScan file. Manipulating the wl2g.public.country or wl5g.public.country arguments allows remote command execution. The exploit is publicly available.

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. The function fromSetWirelessRepeat in the file /goform/WifiExtraSet of the httpd component is affected by OS command injection via manipulation of arguments mac or ssid. The attack can be launched remotely and the exploit has been released.

A heap-based buffer overflow vulnerability was found in Squirrel up to version 3.2 in the SQFunctionProto::Load function in squirrel/sqobject.cpp. The attack requires local access and is publicly disclosed, but the project has not responded.

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. An unknown function in the file /goform/telnet of the httpd component is affected by OS command injection via manipulation of the argument lan.ip. The attack can be launched remotely and the exploit has been disclosed.

In the Squirrel library up to version 3.2, a stack-based buffer overflow vulnerability exists in the validate_format function in sqstdlib/sqstdstring.cpp. The attack can only be executed locally. The exploit has been published and may be used. The project was informed but has not responded.

In Open5GS up to version 2.7.7, the SMF component's smf_nsmf_handle_create_data_in_hsmf function is vulnerable to a null pointer dereference. The attack can be performed remotely and the exploit has been publicly disclosed.

In Open5GS up to version 2.7.7, a vulnerability in the update_authorized_pcc_rule_and_qos function of the SMF component allows manipulation leading to denial of service (DoS). The attack can be launched remotely, and the exploit is publicly available.

Open5GS up to version 2.7.7 has a vulnerability in the smf_n4_build_qos_flow_to_modify_list function in /src/smf/n4-build.c of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been disclosed.

Open5GS up to version 2.7.7 has a vulnerability in the update_authorized_pcc_rule_and_qos function in /src/smf/npcf-handler.c of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been published.

A vulnerability was detected in Open5GS up to version 2.7.7 in the function update_authorized_pcc_rule_and_qos in the SMF component. Manipulation leads to denial of service. The attack can be launched remotely, and the exploit is publicly available.

In Net::CIDR::Lite for Perl (versions before 0.24), extraneous zero characters in CIDR mask values are not properly considered, which may allow IP ACL bypass. Masks like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value.

Net::CIDR::Lite for Perl before version 0.24 does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs with trailing newline or non-ASCII digit characters pass validators but are re-encoded to a different address, causing incorrect matches.

Plack::Middleware::Statsd before version 0.9.0 for Perl may leak user IP addresses. If the communication channel to the statsd daemon is not secured, IP addresses may be leaked. Since version 0.9.0, the IP address is no longer logged by default, and if configured, an HMAC signature is logged instead.

WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can craft URLs with XSS payloads in the tab parameter of the aawp-settings admin page to execute arbitrary JavaScript in the context of authenticated users.

Reflected XSS in the backend/mailingLog/manage module of uBidAuction 2.0.1 via unsanitized date_created, date_from, date_to, and created_at parameters, allowing remote attackers to inject malicious scripts via crafted GET requests.

A reflected XSS vulnerability exists in the auctions/manage module of uBidAuction 2.0.1. The date_created, date_from, date_to, and created_at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests that execute in victims' browsers.

A reflected XSS vulnerability exists in the tickets/manage module of uBidAuction 2.0.1. The date_created, date_from, date_to, and created_at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests that execute in victims' browsers.