CVE Vulnerability Catalog

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

A resample query can lead to out-of-memory crashes in Grafana.

A vulnerability in public dashboards and direct data-sources exposes passwords of all direct data-sources, even if not used in dashboards. Passwords of proxied data-sources are not exposed.

BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthenticated attacker in physical proximity can associate with the open network, access the camera's private network interface, and retrieve sensitive information including the live video and audio stream without credentials.

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.

A stored cross-site scripting vulnerability in the artifacts API of ByteDance DeerFlow prior to commit 5dbb362 allows attackers to inject malicious HTML or JavaScript by uploading it as artifacts. The code executes in the browser context when users view the artifacts.

A hidden functionality vulnerability in NEC Platforms Aterm Series allows an attacker to enable telnet via the network.

NEC Platforms Aterm Series devices contain a missing authorization vulnerability. An attacker can obtain specific device information and change settings via the network.

Softing Industrial Automation GmbH gateways contain a stack-based buffer overflow vulnerability allowing buffer overflow. The issue affects pnGate, epGate, mbGate, smartLink HW-DP through 1.30 and smartLink HW-PN through 1.01.

Thales Sentinel LDK Runtime on Windows before 10.22 contains a stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

A mail message containing an excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes the mail delivery process to consume large amounts of CPU time.

Sending a "NOOP (((...)))" command with 4000 parentheses increases memory usage by about 1 MB. Longer commands cause client disconnection. An attacker can keep this memory allocated by not sending the line feed (LF) character.

Dovecot OTP authentication is vulnerable to replay under specific conditions: if auth cache is enabled and the username is altered in passdb, OTP credentials can be cached so the same OTP reply remains valid. An attacker able to observe an OTP exchange can log in as the user.

When Dovecot is configured to use per-domain passwd files placed one path component above /etc, or a slash has been added to allowed characters, path traversal can occur if the domain component is a directory partial. This can inadvertently read /etc/passwd (or another path ending in passwd), potentially allowing incorrect authentication or making system users appear valid. No publicly available exploits are known.

Dovecot provides a script for attachment to text conversion that unsafely handles zip-style attachments. An attacker can use specially crafted OOXML documents to cause unintended files on the system to be indexed and subsequently end up in FTS indexes. Do not use the provided script; instead, use something else like FTS tika. No publicly available exploits are known.

When sending invalid base64 SASL data, the login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. No publicly available exploits are known.

A flaw was found in firewalld where a local unprivileged user can exploit mis-authorization of two D-Bus setters: setZoneSettings2 and setPolicySettings. This allows modification of the runtime firewall state without proper authentication.

A missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

Active Storage in Rails applications allows users to attach cloud and local files. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, the proxy controller does not limit the number of byte ranges in an HTTP Range header, so a request with thousands of small ranges causes disproportionate CPU usage and may lead to a DoS vulnerability.

The iCalendar Ruby library (versions 2.0.0 to before 2.12.2) does not properly sanitize URI property values during .ics serialization, enabling ICS injection through attacker-controlled input and adding arbitrary calendar lines to the output. Icalendar::Values::Uri falls back to the raw input string when URI.parse fails and serializes it without removing CRLF characters, allowing termination of the original property and creation of a new one. Applications generating .ics files from partially untrusted metadata are impacted, and calendar clients may process injected data as legitimate events.