CVE Vulnerability Catalog

Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

Insufficient validation of untrusted input in the Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted video file.

Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HTML page.

Insufficient validation of untrusted input in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

In Google Chrome prior to version 148.0.7778.96, an uninitialized use in Dawn allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High.

Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.

Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggering unhandled exceptions in the password-reset module. Attackers can access the admin password-reset endpoint to trigger a fatal error caused by a missing namespace import, exposing the absolute server file path, internal class namespaces, line numbers, and source code excerpts.

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed because of the presence of an insecure direct object reference. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by sending a crafted request to the vulnerable API endpoint.

A vulnerability in an identity management API endpoint of Cisco ISE allows an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. The issue exists due to observable error messages when the API endpoint is called.

A vulnerability in the RADIUS Policy API endpoints of Cisco ISE allows an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information. This is due to improper role-based access control (RBAC) permissions on these API endpoints.

A vulnerability in the log file download functionality of Cisco Prime Infrastructure allows an authenticated, remote attacker to download arbitrary log files from the server. This is due to insufficient authorization checks on the download service API.

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. It is due to inadequate validation of file contents during file upload operations; an attacker could upload a file containing malicious scripts or HTML code that the application makes available to other users.

A vulnerability in the web-based management interface of Cisco IoT Field Network Director allows an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This is due to insufficient input validation of user-supplied data.

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This is due to insufficient file access checks.

Velociraptor versions prior to 0.76.4 contain a cross-organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, holding only READ_RESULTS permission) can issue a single authenticated HTTP GET to read any files from other orgs, even without explicit permissions in the target org. The issue does not occur in reverse.