CVE Vulnerability Catalog

The vulnerability in Consensys Discovery versions prior to 0.4.5 uses the same AES/GCM nonce for the entire session, while it should be unique for every message. The node's private key is not compromised, only the session key generated for specific peer communication is exposed.

DependencyCheck for Maven 9.0.0-9.0.6, CLI 9.0.0-9.0.5, and Ant 9.0.0-9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allow unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.

AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and versions earlier than 1.9.0 incorrectly validate some invalid ECDSA signatures. This could lead to acceptance of forged signatures.

Cross-site scripting vulnerability in MolecularFaces before 0.3.0 allows a remote attacker to execute arbitrary JavaScript in the victim's browser via crafted molfiles.

Vulnerability in PCMan FTP Server 2.0.7, related to the STOR command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.

Vulnerability in PCMan FTP Server 2.0.7, related to the PUT command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.

Multiple reflected XSS vulnerabilities were found in nasSvr.php of actiNAS-SL-2U-8 version 3.2.03-SP1. They allow remote attackers to inject arbitrary web script or HTML.

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. Guests with local user privileges can trigger a deadlock and potentially crash the system.

A Cross-Site Scripting (XSS) vulnerability was found in ABO.CMS version 5.9.3. The flaw allows an attacker to execute arbitrary JavaScript code via a crafted Referer header.

Vulnerability in PCMan FTP Server 2.0.7 in the USER Command Handler component. Manipulation leads to denial of service. The attack can be initiated remotely.

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

In the Linux kernel, in the SMB client sub-component (file smb2ops.c), there is an out-of-bounds memory read flaw in receive_encrypted_standard. This issue is caused by an integer underflow on the memcpy length, leading to a denial of service.

A null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

In the Linux kernel, the blkgs destruction path in block/blk-cgroup.c causes a cgroup blkio memory leak. A circular dependency prevents freeing blkcg and blkgs after they are offline, potentially leading to system instability like out-of-memory errors.

The vulnerability in the Hozard alarm system v1.0 involves sending an identical radio frequency signal for each request, allowing an attacker to perform replay attacks and disarm the alarm.

A Stored XSS vulnerability in the Email Encoder plugin for WordPress (up to version 2.1.9) via the eeb_mailto shortcode. Due to insufficient input sanitization and output escaping on user-supplied attributes, authenticated attackers with contributor-level permissions or higher can inject arbitrary web scripts that execute whenever a user accesses an injected page.