CVE Vulnerability Catalog

In 1C-Bitrix Bitrix24 version 23.300.100, a vulnerability was found due to insufficiently protected credentials in DAV server settings. A remote administrator can read proxy-server account passwords via an HTTP GET request.

In 1C-Bitrix Bitrix24 version 23.300.100, a vulnerability was found due to insufficiently protected credentials in SMTP server settings. A remote administrator can send SMTP account passwords to an arbitrary server via an HTTP POST request.

Podatność CVE-2024-9147 dotyczy niewłaściwej neutralizacji tagów HTML związanych z skryptami w aplikacji Bna Informatics PosPratik, co pozwala na ataki typu XSS poprzez ciągi zapytań HTTP. Problem ten dotyczy wersji PosPratik przed 3.2.1.

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1 and 9.5.x <= 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks. An attacker can send a specially crafted request to Playbooks to generate a large response and cause an amplified GraphQL response, potentially crashing the application.

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path traversal that is leading to CSRF in Playbooks.

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, and 9.5.x <= 9.5.9 fail to check that the origin of the message in an integration action matches the original post metadata. An authenticated user can delete an arbitrary post.

Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled, which allows a user to get private channel names by using cmd+K/ctrl+K.

Issue in libexpat before version 2.6.4. The XML_ResumeParser function can crash if XML_StopParser stops/suspends an unstarted parser.

A vulnerability in the login authentication of the Remote Access SSL VPN feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several minutes, resulting in a temporary DoS. This is due to ineffective memory resource handling during authentication. An attacker could send crafted packets to cause resource exhaustion.

A vulnerability in the VPN web server of Cisco ASA and FTD Software allows an authenticated local attacker with administrator privileges to execute arbitrary code with root privileges. This is due to improper validation of a specific file when read from system flash memory.

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to elevate privileges on an affected device. Exploitation requires a valid account configured with a custom read-only role; the attacker performs a write operation due to insufficient validation of role permissions and could modify certain parts of the configuration.

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) could allow an unauthenticated, remote attacker to bypass an access control policy. This is due to improper assignment of geolocation data.

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies. The issue is due to a logic error when handling embryonic (half-open) TCP connections. Devices configured with Snort 2 are not affected.

A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This is due to improper authentication of password update responses.

A vulnerability in the Network Service Group (NSG) feature of Cisco ASA and FTD could allow an unauthenticated, remote attacker to bypass a configured ACL and allow traffic that should be denied. This is due to a logic error when NSG ACLs are populated.

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser accessing an affected device. The issue is due to improper validation of user-supplied input to application endpoints.

A vulnerability in the rate filtering feature of the Snort detection engine in multiple Cisco products could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This is due to an incorrect connection count comparison. An attacker could send traffic exceeding the rate filter to bypass it, allowing unintended traffic into the protected network.

A vulnerability in the VPN web client services of Cisco ASA and FTD could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser accessing an affected device. This is due to improper validation of user-supplied input.