CVE Vulnerability Catalog

Apache Airflow's SMTP provider SmtpHook called Python's smtplib.SMTP.starttls() without an SSL context, so no certificate validation was performed on the TLS upgrade. A man-in-the-middle between the Airflow worker and the SMTP server could present a self-signed certificate, complete the STARTTLS upgrade, and capture the SMTP credentials sent during the subsequent login() call.

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

The BEEP protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 contains a crash vulnerability. This can be exploited to cause a denial of service.

LZ77 decompression crash in the dissection engine in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 causes a crash in the RTSP protocol dissector. This can lead to application termination while analyzing network traffic.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash in the MySQL protocol dissector. This allows an attacker to trigger a denial of service (DoS).

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes an infinite loop in the RPKI-Router protocol dissector. This allows an attacker to trigger a denial of service (DoS).

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

An AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service.

A vulnerability in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 causes a crash in the ICMPv6 PvD protocol dissector. This allows an attacker to trigger a denial of service (DoS).

Little CMS (lcms2) versions 2.16 through 2.18 before 2.19 contain an integer overflow in ParseCube in cmscgats.c.

An open redirect vulnerability exists in multiple laser printers and MFPs implementing Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

The UDS protocol dissector in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 contains an infinite loop vulnerability. This can be exploited to cause a denial of service.

A vulnerability was detected in Tenda 4G300 version US_4G300V1.0Mt_V1.01.42_CN_TDC01 affecting the sub_425A28 function of /goform/DelFil. Manipulation of the delflag argument results in command injection, and the attack may be launched remotely. The exploit is now public and may be used.

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0 in /admin/update_customer.php, where manipulation of the type/length/business parameters leads to SQL injection. The attack can be carried out remotely and the exploit has been published.

In ZachHandley ZMCPTools up to 0.2.2, the functionality in src/managers/ResourceManager.ts (MCP Log Resource Handler component) is vulnerable to path traversal via manipulation of the dirname argument. The exploit has been publicly disclosed and can be used remotely.

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to SQL injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.