CVE Vulnerability Catalog

A Stored XSS vulnerability in Centreon Infra Monitoring (SNMP traps group configuration modules) allows users with elevated privileges to inject malicious scripts. Affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

A Stored Cross-site Scripting (XSS) vulnerability in Centreon Infra Monitoring arises from improper neutralization of input during web page generation. Users with elevated privileges can inject malicious scripts in the ACL Resource access configuration modules. This affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

A Stored Cross-site Scripting (XSS) vulnerability in Centreon Infra Monitoring is caused by improper neutralization of input during web page generation. Users with elevated privileges can inject malicious scripts in the SNMP traps manufacturer configuration modules. This affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

IBM Content Navigator versions 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application when using an application URL. Application files and folders become visible in the browser to a user; however, the contents of the files cannot be read or modified.

A path traversal vulnerability exists in the admin panel of Ivanti EPMM before versions 12.6.0.2, 12.5.0.4, and 12.4.0.4. A remote authenticated attacker with admin privileges can write data to unintended locations on disk.

An improper access control vulnerability in AMD SEV-SNP allows an admin privileged attacker to write to the RMP during SNP initialization, potentially leading to loss of SEV-SNP guest memory integrity.

A cross-site request forgery vulnerability exists in the product and version listed. The issue stems from missing CSRF checks on the impacted form, allowing unintended configuration modification if an attacker tricks a logged-in admin into visiting a crafted link.

A Stored Cross-Site Scripting (XSS) issue exists in the affected product that could allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. The vulnerability was fixed in Firefox 144 and Thunderbird 144.

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. The vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

There was a way to change the value of JavaScript object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4, enabling a remote attacker to inject formula data into a generated CSV file. Exploitation requires the attacker to create a malicious link, the user to click it, and then the resulting CSV file to be manually opened.

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.

In the WLAN AP driver, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

In the GNSS driver, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.

The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.

An unauthenticated remote attacker (MITM) can intercept websocket messages to gain access to login credentials for the Webfrontend. The vulnerability stems from inadequate protection of the communication.