CVE Vulnerability Catalog

An Origin Validation Error vulnerability in an insufficiently protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't configured with a root password, an attacker can modify a specific file whose contents will be added to the Junos configuration without being visible, allowing the addition of any configuration unknown to the operator, including users and IP addresses. The exploit is persistent across reboots and even zeroization; the indicator of compromise is a modified /etc/config/<platform>-defaults[-flex].conf file.

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management Manager (cfmman) of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, and PTX10016 allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Sending specific valid traffic causes cfmd to spike CPU to 100% and cfmman's memory to leak, eventually causing the FPC to crash and restart. Continued receipt of these packets sustains the DoS condition.

A vulnerability in the SIP ALG of Junos OS on MX and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS) by crashing flowd/mspmand when memory utilization is high and specific SIP packets are received. The system recovers automatically, but continuous attacks can cause a sustained DoS.

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL.

In Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL), insufficient escaping in the report scheduler allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs.

GitLab CE/EE in all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 could allow an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTTP responses.

The Slider Revolution plugin for WordPress in versions up to and including 6.7.37 is vulnerable to unauthorized access and modification due to missing capability checks on several functions. Authenticated attackers with Contributor-level access or higher can install and activate add-ons, create sliders, and download arbitrary files.

In the Linux kernel, the ASoC AMD ACP driver incorrectly retrieves acp_chip_info, potentially leading to null pointer dereferences. The issue affects functions other than set_tdm_slot, which were not fixed earlier.

In the Linux kernel, the clk sunxi-ng mp driver has a bug in the dual-divider clock rate readback function. The P divider offset was omitted, causing bogus or zero clock rates, potentially leading to divide-by-zero.

A transient DOS may occur while processing an IOCTL call for image encoding. The vulnerability affects the image encoding mechanism.

Information disclosure while processing batch command execution in Video driver.

A transient DOS may occur while processing video packets received from video firmware. The vulnerability affects video packet processing.

Information disclosure may occur while processing the hypervisor log. The vulnerability concerns logs generated by the hypervisor.

Memory corruption may occur while processing an IOCTL call for a DMM/WARPNCC CONFIG request. The vulnerability affects handling of DMM/WARPNCC configuration requests.

A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/admin/state.php. Manipulation of the state argument allows remote SQL injection. The exploit is public.