CVE Vulnerability Catalog

A reflected cross-site scripting (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A vulnerability in WSO2 Identity Server is due to not validating the organization context when executing adaptive authentication flows. A malicious actor with privileges to configure adaptive authentication in one organization can leverage this functionality to execute authentication logic on other organizations and sub-organizations, bypassing authorization boundaries.

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x versions. A malicious actor with a valid user account on a vulnerable deployment can perform sensitive operations against the Gateway REST API regardless of their actual roles or privileges.

In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to be injected into HTTP responses. By exploiting this vulnerability, a malicious actor can inject or overwrite arbitrary HTTP response headers, leading to manipulation of browser caching, alteration of security-related headers, and injection of sensitive information such as cookie values.

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.

The OpenSearch logging provider in Apache Airflow, when configured with a host URL embedding credentials (e.g., https://user:password@server:9200), wrote the full host URL including credentials into task logs. Any user with task-log read permission could harvest the backend credentials. Users are advised to upgrade to apache-airflow-providers-opensearch 1.9.1 or later.

The Elasticsearch logging provider in Apache Airflow, when configured with a host URL embedding credentials (e.g., https://user:password@server:9200), wrote the full host URL including credentials into task logs. Any user with task-log read permission could harvest the backend credentials. Users are advised to upgrade to apache-airflow-providers-elasticsearch 6.5.3 or later.

The WebDyne::Session library for Perl before version 3.003_704 generates session IDs insecurely. IDs are created using the rand() function and MD5 hash, making them predictable and unsuitable for cryptographic purposes.

In Zephyr, sockets created with `IPPROTO_TLS_1_3` can negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to mbedTLS. Applications assuming `IPPROTO_TLS_1_3` enforces TLS 1.3 may silently use TLS 1.2 and remain exposed to TLS 1.2-specific weaknesses.

A vulnerability was detected in cramfs-tools up to version 2.1. The do_directory function in cramfsck.c (Directory Handler) allows path traversal. The attack can only be performed locally, and the exploit has been publicly disclosed.

A weakness has been identified in D-Link DNS-320 2.06B01 affecting the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes OS command injection, and the attack can be initiated remotely.

A security flaw has been discovered in D-Link DNS-320 2.06B01 affecting the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in OS command injection, the attack may be performed remotely, and the exploit has been released to the public.

A vulnerability was identified in D-Link DNS-320 2.06B01 affecting the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to OS command injection, the attack is possible remotely, and the exploit is publicly available.