CVE Vulnerability Catalog

The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration information.

The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration information.

Revive Adserver 6.0.0+ has improper input neutralization, allowing a reflected XSS attack in the banner-zone.php script.

Revive Adserver 5.5.2 and 6.0.1 and earlier versions have improper input neutralization, allowing manager accounts to craft XSS attacks against their own advertiser users.

Debug information disclosure in the SQL error message in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts.

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions cause non-admin users to have access to the contact name and email address of other users on the system.

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack.

Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.

Improper Neutralization of Input in Revive Adserver 5.5.2, 6.0.1 and earlier versions causes a potential reflected XSS attack. The vulnerability allows injection of malicious JavaScript that is reflected back to the victim's browser.

An uncontrolled resource consumption vulnerability exists in userlog-index.php. An attacker with access to the admin interface can request an arbitrarily large number of items per page, potentially leading to denial of service.

Open OnDemand, an HPC portal, in versions prior to 4.0.8 and 3.1.16 creates world-writable locations in the GEM_PATH, potentially allowing unauthorized modifications.

Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface; an attacker can intercept and modify the POST /livewire/update request to inject arbitrary HTML or JavaScript, which executes in the browser of any authenticated admin who views the import page. NOTE: this is disputed by the Supplier because the report only demonstrates that an authenticated user can choose to conduct a man-in-the-middle attack against himself.

A stored cross-site scripting (XSS) vulnerability exists in SWISH Prolog through 2.2.0, allowing attackers to execute arbitrary code via a crafted web IDE notebook.

Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, users can craft a Time of Check to Time of Use (TOCTOU) attack when downloading zip files to access files outside of the OOD_ALLOWLIST. Files accessed are still protected by UNIX permissions.

In ClipBucket version 5.5.2, a change to network.class.php causes the application to dynamically build the server URL from the incoming HTTP Host header when the configuration base_url is not set. Because Host is client-controlled, an attacker can supply an arbitrary Host value, causing password-reset links sent by forget.php to point to the attacker's domain. If a victim follows the link and enters their activation code on the attacker-controlled domain, the attacker can capture the code and take over the account.

When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli.ts (linkNodeModules / cleanup), the function returns the target path instead of the alias (symlink path). The later cleanup routine removes what it received, which deletes the target directory itself. Result: zx can delete an external <path>/node_modules outside the current working directory.

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

SOPlanning is vulnerable to stored XSS in the /feries endpoint. A malicious attacker with access to the public holidays feature can inject arbitrary HTML and JS into the site, which will be rendered/executed when opening multiple pages; by default only administrators and privileged users can access this endpoint. This issue was fixed in version 1.55.

SOPlanning is vulnerable to Stored XSS in the /status endpoint. An authenticated attacker can inject arbitrary HTML and JavaScript that will be rendered/executed when opening multiple pages. The issue was fixed in version 1.55.