CVE Vulnerability Catalog

It was discovered that an nft object or expression could reference an nft set in a different nft table, leading to a use-after-free once that table was deleted.

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. It is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type 'eval'. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Wykryto podatność na wstrzykiwanie poleceń systemowych w starszych modelach QNAP VioStor NVR działających na oprogramowaniu QVR Firmware 4.x. W przypadku jej wykorzystania, uwierzytelnieni użytkownicy mogą wykonywać polecenia przez sieć.

An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection.

VisiLogic w wersjach przed 9.9.00, używany w PLC i HMI Vision oraz Samba, korzysta z domyślnego hasła administracyjnego. Nieautoryzowany atakujący z dostępem do sieci może przejąć kontrolę administracyjną nad podatnym systemem.

A memory corruption vulnerability in Graphics Linux occurs while assigning a shared virtual memory region during an IOCTL call. It may lead to unintended memory modification.

Memory corruption occurs while submitting a large list of sync points in an AUX command to IOCTL_KGSL_GPU_AUX_COMMAND. It may lead to unintended memory modification.

Memory corruption in DSP Services occurs during a remote call from HLOS to DSP. It may lead to unintended memory modification.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. Processing web content may lead to arbitrary code execution.

An out-of-bounds read issue in web content processing that may disclose sensitive information. Fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. Apple is aware of reports of exploitation against iOS versions before 16.7.1.

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file.

In ownCloud core before version 10.13.1, an attacker can access, modify, or delete any file without authentication if the victim's username is known and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the file owner. The earliest affected version is 10.6.0.

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key.

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application.

Podatność w sterowniku systemu plików dziennika Windows umożliwia podniesienie uprawnień. Atakujący może wykorzystać tę lukę, aby uzyskać wyższe uprawnienia w systemie.

An elevation of privilege vulnerability in the Windows Cloud Files Mini Filter Driver. It may allow an attacker to gain higher privileges on the system.

An elevation of privilege vulnerability in the Windows DWM Core Library. It may allow an attacker to gain higher privileges on the system.

A security feature bypass vulnerability in Windows SmartScreen. It may allow an attacker to bypass protective mechanisms.