CVE Vulnerability Catalog

Vulnerability in the DOM: Navigation component in Firefox and Thunderbird allows privilege escalation. Fixed in version 153.

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.

Use-after-free vulnerability in the WebRTC: Audio/Video component of Firefox and Thunderbird. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Information disclosure vulnerability in the Graphics: ImageLib component. This flaw was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Use-After-Free vulnerability in Rust deserialization logic of Apache Fory versions 0.13.0 through 1.3.0. A crafted Fory payload can cause undefined behavior, process crash, or potential memory disclosure.

Arbitrary file upload vulnerability in MapSVG plugin for WordPress (all versions up to 8.14.0) due to missing file type validation in SVGFile constructor. Requires admin access.

A vulnerability in Zohocorp ManageEngine ADSelfService Plus before version 6524 allows Multi Factor Authentication (MFA) bypass. An attacker can exploit this flaw to gain unauthorized access to the system without completing additional authentication factors.

The bpost-shipping-platform WordPress plugin before version 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this plugin.

The Free Builder for Elementor WordPress plugin before version 1.6.7 does not sanitize contact form field values before storing and displaying them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.

Information disclosure vulnerability in HCL DevOps Plan. An attacker can use the revealed information to focus their attacks.

Post-authentication command injection in the syslog component of Zyxel AX7501-B1 firmware. An authenticated attacker with admin privileges can execute OS commands via the 'LogServer' field.

A vulnerability was detected in D-Link DNS-320 1.0.2 in the file /mydlink/multi_uploadify.php. Manipulation of the argument Filedata[] results in unrestricted upload. The attack is remotely exploitable and the exploit is public.

In D-Link DNS-320 version 1.0.2, an unknown function in /web/function/save_ajax.php is vulnerable to unrestricted file upload via the Malicious Handler argument. The attack can be executed remotely and the exploit is publicly available.

A vulnerability has been found in D-Link DNS-320 version 1.0.2, involving unrestricted file upload in the uploadify.php function. An attacker can remotely upload arbitrary files, potentially leading to device compromise.

A vulnerability in D-Link DNS-320 1.0.2 in the file /photo_center/php/uploadify.php allows unrestricted upload via manipulation of the Malicious Handler argument. The attack can be initiated remotely and the exploit is publicly available.

Netty prior to versions 4.1.136.Final and 4.2.16.Final continues inflating zlib-compressed header blocks after maxHeaderSize is exceeded, allowing a remote peer to send a small compressed HEADERS block that expands into much larger raw header data, causing compression-amplified CPU and allocation churn.

Netty prior to versions 4.1.136.Final and 4.2.16.Final accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in DefaultSpdySettingsFrame, allowing a remote SPDY/3.1 peer to send a syntactically valid roughly 2 MiB SETTINGS frame that creates 262144 map entries, amplifying network input into heap growth and ordered-map insertion work.

A vulnerability was found in D-Link DNS-320 version 1.0.2, involving unrestricted file upload in the /web/web_file/upload.php script. Manipulating the File argument allows remote attackers to upload arbitrary files without proper validation. The exploit has been publicly disclosed and may be used.

Use-after-free in the Aura component in Google Chrome prior to 150.0.7871.128 allows a local attacker to potentially exploit heap corruption via a malicious file. The issue has a high security severity.

Use-after-free vulnerability in the Ozone component in Google Chrome on Linux prior to version 150.0.7871.128. A remote attacker, by convincing a user to perform specific UI gestures, can cause heap corruption via a crafted HTML page.