CVE Vulnerability Catalog

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

Niewystarczające egzekwowanie polityki w DevTools w Google Chrome na systemie Windows przed wersją 103.0.5060.53 umożliwia atakującemu, który przekonał użytkownika do zainstalowania złośliwego rozszerzenia, uzyskanie potencjalnie wrażliwych informacji z lokalnych plików użytkownika za pomocą spreparowanej strony HTML.

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

A cross-site scripting (XSS) vulnerability was found in Online Fire Reporting System v1.0 in /index.php/?p=report. Attackers can inject malicious JavaScript or HTML via the "Contac #" text field.

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack.

A race condition in the Linux kernel before version 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

Authorized users of BigFix Web Reports can perform HTML injection on the email administrative configuration page.

BigFix Web Reports authorized users may see SMTP credentials in clear text. The flaw involves storing or displaying SMTP authentication data without encryption.

When setting font with malicious data by ioctl cmd PIO_FONT, kernel will write memory out of bounds.

When sending malicious data to the kernel via the ioctl command FBIOPUT_VSCREENINFO, the kernel will write memory out of bounds. This vulnerability affects the Linux kernel.

Cross Site Scripting (XSS) vulnerability in Gollum versions 5.0 through 5.1.2. The attack is possible via the filename parameter in the 'New Page' dialog.

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver when a user uses BPF for the device, leading to the nsim_map_alloc_elem function being called. A local user could exploit this flaw to gain unauthorized access to some data.

A stored XSS vulnerability was found in osTicket-plugins Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae in the audit/class.audit.php component. Attackers can execute arbitrary web scripts or HTML via a crafted SVG file.

A cross-site scripting (XSS) vulnerability was discovered in the Mediacenter by EGT-Kommunikationstechnik UG before version 2.0, specifically in the Online_Update.php component. It allows injection of malicious scripts into the page.

Magnolia CMS v6.2.19 contains a cross-site scripting (XSS) vulnerability in the Edit Contact function. An attacker can inject arbitrary JavaScript or HTML by uploading a crafted SVG document as a profile picture.

In curl before 7.84.0, during FTP transfers secured by krb5, message verification failures are handled incorrectly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.

curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with different algorithms. The number of acceptable "links" in this "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.

A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.

A vulnerability in iTop VPN 3.2 allows an attacker to steal another user's token by creating a named pipe with the same name used by the iTopVPNmini.exe component. The attacker listens for connections and abuses the ImpersonateNamedPipeClient() function.

IObit products (Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, iTop Screenshot) use unencrypted HTTP connections to download configuration files during updates. An attacker can intercept this traffic and supply a malicious config file pointing to fake update locations, leading to remote code execution with administrative privileges.