CVE Vulnerability Catalog

In Langchain-Chatchat up to 0.3.1.3, a vulnerability was found in the function PIL.Image.tobytes of dialogue.py in the Vision Chat Paste Image Handler component. Manipulation of the paste_image.image_data argument leads to use of weak hash. Local network access is required and the attack is difficult.

A vulnerability in Postfix before versions 3.8.16, 3.9.10, and 3.10.9 allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument track_id leads to denial of service. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.cpp. This manipulation of the argument track_id causes denial of service. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

A security flaw was discovered in Dolibarr ERP CRM up to 23.0.2 in the dol_verifyHash function of htdocs/core/lib/security.lib.php within the Online Signature Module. Manipulation results in improper verification of cryptographic signature. The attack may be performed remotely but is highly complex and difficult to exploit; the exploit has been released publicly and the vendor did not respond.

A vulnerability was determined in kerwincui FastBee up to 1.2.1 in the Add function of SysNoticeController.java within the System Notice Handler. Manipulating the noticeContent argument causes cross-site scripting. The attack can be initiated remotely, the exploit has been publicly disclosed and may be utilized, and the vendor did not respond.

A vulnerability was found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android affecting an unknown function of the /TwoFactor file. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be performed remotely, but its complexity is high and exploitability is regarded as difficult. The exploit has been publicly disclosed and the vendor did not respond.

A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01 in the platform_do_upgrade_cameo_dev function of cameo_dev.sh within the Firmware Update Handler. Manipulation leads to insufficient verification of data authenticity. The attack is remotely possible but highly complex and difficult to exploit.

A vulnerability was found in TRENDnet TEW-821DAP 1.12B01 affecting an unknown function of the /www/cgi/ssi file of the Firmware Update component. The manipulation leads to cleartext transmission of sensitive information. The attack can be executed remotely, but its complexity is high and exploitability is reported as difficult. The product was EOL 8 years ago and is no longer supported.

A weakness was identified in TRENDnet TEW-821DAP 1.12B01 in the find_hwid/new_gui_update_firmware function of the Firmware Update Handler. Manipulating the dest argument leads to insufficient verification of data authenticity. The attack can be launched remotely but is highly complex and difficult to exploit.

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer divide-by-zero in Pbuild_file_symtab(). The vulnerability stems from an integer division by zero error.

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. It affects the editPage function in app/Http/Controllers/UserController.php. Manipulation of the pageDescription argument can lead to cross site scripting, and the attack can be launched remotely.

A format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers controlling a modified server can force the client to dump a small portion of memory to log files, potentially revealing secrets.

A logic flaw was found in GnuTLS when processing multi-record OCSP responses. A remote attacker can exploit this during a TLS handshake by sending a crafted OCSP response, causing a client with OCSP verification enabled to incorrectly accept a revoked server certificate.

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0 in the Customer function of /index.php?page=customer. Manipulating the Name argument results in cross-site scripting. The attack may be launched remotely, and the exploit is now public and may be used.

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. The vulnerability occurs when the application uses Spring MVC or WebFlux, configures resource chain support with caching enabled, supports encoded resource resolution, and the resource cache is empty when the attacker has access. An attacker can poison the resource cache with resources using the wrong encoding, causing a denial of service.

Insufficient validation of untrusted input in the Compositing component in Google Chrome prior to 147.0.7727.138 allows a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page.

Race condition vulnerability in MHTML in Google Chrome prior to 147.0.7727.138. An attacker who convinces a user to install a malicious extension can leak cross-origin data via a crafted Chrome Extension. (High severity per Chromium).

In Xuxueli xxl-job up to 3.3.2, the logDetailCat function lacks control of resource identifiers (logId), allowing remote attack with high complexity.