CVE Vulnerability Catalog

An issue was discovered in Libreswan 3.x and 4.x before version 4.12 related to an IKEv1 ISAKMP SA Informational Exchange packet. When it contains a Delete/Notify payload followed by further Notifies, it can lead to a NULL pointer dereference, causing the pluto daemon to crash and restart.

An issue was discovered in Libreswan before version 4.12, occurring when an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN. This causes a NULL pointer dereference, resulting in a crash and restart of the pluto daemon.

An issue was discovered in Libreswan before version 4.12 related to IKEv2 Child SA REKEY packets containing an invalid IPsec protocol ID of 0 or 1. This results in an error notify INVALID_SPI being sent back, causing the pluto daemon to crash.

OpenFGA is an authorization engine that is vulnerable to authorization bypass when calling the ListObjects API in version 1.3.0 or earlier. The issue affects users using models containing expressions of type rel1 from type1.

Notepad++ versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. Exploitation of this issue may lead to leaking internal memory allocation information.

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section.

IceWarp version 11.4.6.0 was found to contain a cross-site scripting (XSS) vulnerability via the color parameter.

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. An attacker may impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user.

The get_parentControl_list_Info function does not verify the parameters entered by the user, leading to a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn.

CVE-2023-41167 vulnerability in @webiny/react-rich-text-renderer before version 5.37.2 allows XSS attacks by content managers. The issue arises from using the dangerouslySetInnerHTML prop without HTML sanitization, allowing for the injection of malicious scripts.

Version 5.2.1 of giflib contains a segmentation fault in the getarg.c component, which may lead to unexpected application behavior.

In JetBrains TeamCity versions before 2023.05.3, reflected XSS was possible during copying Build Step.

In JetBrains TeamCity versions before 2023.05.3, stored XSS was possible during Cloud Profiles configuration.

Mattermost fails to restrict which parameters' values it takes from the request during signup, allowing an attacker to register users as inactive. This blocks them from later accessing Mattermost without the system admin activating their accounts.

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.

The 'Skylark' App for Android version 6.2.13 and earlier and for iOS version 6.2.13 and earlier has improper authorization in the handler for custom URL scheme. This allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) and Arbitrary Usermeta Update. These issues arise from insufficient input sanitization and output escaping in the 'save' function.

Datasette is an open source tool for exploring and publishing data, which has a vulnerability in versions 1.0 alpha - 1.0a3. The issue involves the disclosure of database and table names at the API explorer endpoint, which may occur if the user is not authenticated.

An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5, affecting servers using TLS client authentication. If a TLS server-side socket is closed quickly, data may still be readable from the socket buffer without authentication.

In version 1.3.6 of Silverware Games, the password recovery form's behavior was changed. The form now always displays a message about sending a code, regardless of whether the provided email is associated with a user account.