CVE Vulnerability Catalog

An issue was discovered in the Linux kernel before 6.3.8 related to the lack of validation of the NetBIOS header's length in relation to SMB header sizes in ksmbd. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before version 6.3.9, where ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.4 related to an off-by-one error in memory allocation in fs/ksmbd/connection.c, which may lead to out-of-bounds access.

An issue was discovered in the Linux kernel before version 6.3.4 in fs/ksmbd/smb2pdu.c, which does not properly check the UserName value. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.8 related to integer underflow and out-of-bounds read in the deassemble_neg_contexts function in fs/smb/server/smb2pdu.c in ksmbd.

An issue was discovered in the Linux kernel before version 6.3.4 related to an out-of-bounds read in smb2_find_context_vals. This occurs when the name_len of create_context is larger than the tag length.

CVE-2023-3724 affects TLS 1.3 clients that do not receive a PSK or KSE extension when connecting to a malicious server. In this case, a default predictable buffer is used for the IKM value, which may lead to session key compromise.

CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as `root` on CasaOS instances.

CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification, unauthenticated attackers can execute arbitrary commands as `root` on CasaOS instances.

D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin.

A vulnerability in Origin Software ATS Pro allows authorization bypass through a user-controlled key, leading to authentication abuse.

CVE-2023-3376 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in the Digital Strategy Zekiweb system. This issue affects Zekiweb versions before 2.

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.

CVE-2023-2963 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection in Oliva Expertise EKS versions before 1.2.

There is a prototype pollution vulnerability in the GitHub repository automattic/mongoose prior to version 7.3.4.

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in the changepwd.cgi application.

IQ Engine before version 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges for remote code execution.

The WAYOS FBM-291W version 19.09.11V was found to contain a command injection vulnerability via the component /upgrade_filter.asp.

The WAYOS FBM-291W version 19.09.11V was found to contain a buffer overflow vulnerability in the component /upgrade_filter.asp.

Netkit-rcp in rsh-client version 0.17-24 allows command injection via filenames because /bin/sh is used by susystem. This is related to issues described in CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.