CVE Vulnerability Catalog

A Cross-Site Scripting (XSS) vulnerability was found in SeaCMS before version 13.2 via the 'vid' parameter in Upload/js/player/dmplayer/player. It allows a remote attacker to inject malicious JavaScript code into the page.

An XSS vulnerability in the reconcile method of the AttachmentReconciler class in Halo system v.2.20.18LTS and earlier allows an attacker to inject malicious scripts.

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.

A vulnerability in CPUID cpuz.sys version 1.0.5.4 allows an attacker to use DeviceIoControl with unvalidated parameters to perform RDMSR and WRMSR operations. This enables modification of the MSR_LSTAR register and hooking of the KiSystemCall64 syscall, followed by ROP-based exploitation to disable the SMAP flag in CR4 and execute code in kernel context.

An infinite recursion vulnerability was found in Artifex MuPDF versions 1.25.5 and 1.25.6 within the `mutool clean` utility. A remote attacker can cause a denial of service (DoS) by supplying a crafted PDF file with cyclic /Next references in the outline structure.

A vulnerability in the pdfseparate utility of the poppler library version 25.04.0 allows an attacker to trigger infinite recursion by supplying a crafted PDF file. This leads to a Denial of Service (DoS).

A memory leak flaw was found in the Linux kernel's ksmbd component. If a client sends a session setup request with an unknown NTLMSSP message type, it can lead to resource exhaustion.

A flaw in the Linux kernel's ksmbd component causes a deadlock when multiple concurrent session setup requests are sent, potentially leading to a denial of service.

The Files module in versions 0.16.9 and below lacks logic to prevent exploitation of backend SQL queries without direct output, potentially allowing unauthorized data access. This is fixed in version 0.16.10.

The Files module in versions 0.16.9 and below lacks logic to prevent injection of arbitrary JavaScript in the File Move functionality, which can lead to Browser JS code execution in the context of the user's session. This is fixed in version 0.16.10.

In Sipwise rtpengine before version 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets, except when the relay is configured for strict source and learning disabled.

A file upload vulnerability in CS Cart 4.18.3 allows unrestricted upload of HTML files, which are rendered directly in the browser. Attackers can upload crafted HTML files containing malicious content, such as fake login forms for credential harvesting or scripts for Cross-Site Scripting (XSS) attacks. Since the content is served from a trusted domain, it significantly increases the likelihood of successful phishing or script execution against other users.

A Cross Site Request Forgery (CSRF) vulnerability was found in CS Cart 4.18.3. It allows attackers to add products to a user's comparison list via a crafted HTTP request.

A vulnerability in Aver PTC310UV2 firmware version 0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function.

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

A PHAR deserialization vulnerability in the /themes/import component of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

A flaw in the Linux kernel's handling of new TCP connections causes memory not to be released after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system.

In Docker Engine versions 28.2.0 through 28.3.2, reloading the firewalld service removes all iptables rules including those created by Docker. Versions before 28.3.3 fail to recreate the rules blocking external access to containers, so containers with ports published to localhost become accessible from remote machines with routing to the Docker bridge. This is fixed in version 28.3.3.

A vulnerability in WebKit allows Safari to crash when processing maliciously crafted web content. The issue was fixed by improving memory handling.

A vulnerability in WebKit may cause Safari to crash when processing maliciously crafted web content. The issue was fixed by improving memory handling.