CVE Vulnerability Catalog

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML.

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted TIFF file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

Allegro Tech BigFlow before 1.6 is vulnerable to missing SSL certificate validation. The lack of certificate validation may allow an attacker to impersonate a trusted server.

Insecure permissions were discovered in BMC firmware version 1.63 for the Supermicro X11SSL-CF HW Rev 1.01 motherboard. This vulnerability could allow unauthorized users to access sensitive system management functions.

Cross-site scripting (XSS) vulnerability in Simple Guestbook Management System 1 allows attackers to inject malicious JavaScript via Name, Referrer, Location, and Comments fields.

The Multi-column Tag Map WordPress plugin in versions up to 17.0.24 contains a stored cross-site scripting (XSS) vulnerability. A user with contributor or higher privileges can store a malicious script that executes in other users' browsers.

A Server-Side Request Forgery (SSRF) vulnerability was discovered in request-baskets up to version 1.2.1 via the /api/baskets/{name} component. Attackers can access network resources and sensitive information by crafting a malicious API request.

Podatność CVE-2023-1060 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w systemie YKM CRM, co pozwala na ataki typu Reflected XSS. Problem ten dotyczy wersji YKM CRM przed 23.03.30.

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite an SSH option being modified, which should have prevented reuse. Two SSH settings were omitted from the configuration check, allowing them to match easily and potentially leading to reuse of an inappropriate connection.

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

An authentication bypass vulnerability exists in libcurl before 8.0.0 in the connection reuse feature. Failure to check for changes in CURLOPT_GSSAPI_DELEGATION can reuse connections with incorrect user permissions, affecting krb5/kerberos/negotiate/GSSAPI transfers.

An authentication bypass vulnerability exists in libcurl before 8.0.0 in the FTP connection reuse feature. Certain FTP settings (CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, CURLOPT_USE_SSL) were not included in connection matching, potentially causing wrong credentials to be used.

Podatność CVE-2023-1013 dotyczy niewłaściwej neutralizacji tagów HTML związanych z skryptami w aplikacji Vira-Investing, co umożliwia ataki typu Cross-Site Scripting (XSS). Problem ten występuje w wersjach przed 1.0.84.86.

A vulnerability in the Linux Kernel 6.0-rc2 within the nft_osf_eval function allows a local attacker to disclose sensitive information. It results from the lack of proper memory initialization prior to access. The attacker must first obtain the ability to execute high-privileged code.

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the 'values' parameter at /users/absence?search_month=1. An attacker can exploit this flaw to manipulate database queries.

The X509_VERIFY_PARAM_add0_policy() function in OpenSSL is documented to implicitly enable certificate policy checking, but the implementation does not. Certificates with invalid or incorrect policies can therefore pass verification.

Applications using a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA. Invalid certificate policies in leaf certificates are silently ignored, allowing a malicious CA to circumvent policy checking.

In Stimulsoft Designer (Desktop) versions 2023.1.5 and 2023.1.4, after decompiling the Stimulsoft.report.dll library, an attacker can decrypt any connection string stored in .mrt files because a static secret is used. This secret is identical across all tested versions and operating systems.

A highly privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib in a locally installed Secvisogram in versions < 0.1.0. This can result in arbitrary code execution and DoS once the user triggers validation.

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications. The problem stems from missing proper access controls.