CVE Vulnerability Catalog

Softr v2.0 was found to contain an HTML injection vulnerability via the Work Space Name parameter. An attacker can inject malicious HTML code that will be executed in the victim's browser.

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via the image clipping function.

OpenSSH 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."

A stack overflow vulnerability was discovered in Notepad++ version 8.4.1 within the Finder::add() component. This flaw could be exploited for remote code execution or application crash.

Reflected Cross-site Scripting (XSS) exists in the GitHub repository ampache/ampache prior to 5.5.7. The flaw allows injection of a malicious script that is reflected in the server response.

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through version 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.

GNU Tar through 1.34 has a one-byte out-of-bounds read resulting in use of uninitialized memory for a conditional jump. The issue occurs in from_header in list.c via a V7 archive where mtime has approximately 11 whitespace characters.

In Grafana prior to versions 8.5.16 and 9.2.8, a malicious user can create a snapshot and arbitrarily choose the originalUrl parameter by editing the query thanks to a web proxy. When another user opens the snapshot URL, the 'Open original dashboard' button points to the attacker's injected URL instead of the real original dashboard.

Relative path traversal vulnerability in Eclipse GlassFish versions 5.1.0 to 6.2.5. Unauthenticated remote attacker can access configuration files and application source code. Fixed in GlassFish 7.0.0.

In MISP versions up to 2.4.167, there is an XSS vulnerability in app/View/AuthKeys/authkey_display.ctp that can be exploited via the Referer field when adding an authkey.

In MISP version 2.4.167, there is an XSS vulnerability that allows an attack via a network history name in the app/webroot/js/action_table.js file.

Multiple XSS vulnerabilities were found in ReQlogic version 11.3. An attacker can inject malicious JavaScript or HTML via the POBatch and WaitDuration parameters.

CRLF vulnerability in the Reprise License Manager (RLM) web interface through version 14.2BL4 in the password parameter of the View License Result function allows remote attackers to inject arbitrary HTTP headers.

An SSRF vulnerability was discovered in the Reprise License Manager (RLM) web interface up to version 14.2BL4. It allows remote attackers to send requests to internal servers and perform port scans via the actserver parameter in the License Activation function.

An OS Command Injection vulnerability was found in OKER G955V1 firmware version v1.03.02.20161128. A physical attacker can interrupt the boot sequence and execute arbitrary commands with root privileges.

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.

Wykorzystanie uszkodzonego lub ryzykownego algorytmu kryptograficznego w funkcji mbedtls_mpi_exp_mod() w pliku lignum.c w Mbed TLS we wszystkich wersjach przed 3.0.0, 2.27.0 lub 2.16.11 umożliwia atakującym, posiadającym dostęp do wystarczająco precyzyjnych informacji o czasie i dostępie do pamięci, odzyskanie kluczy prywatnych używanych w RSA.

A buffer overflow flaw in the Linux kernel Broadcom Full MAC Wi-Fi driver. Occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate privileges.

The atm_tc_enqueue function in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service due to type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).