CVE Vulnerability Catalog

XWiki Platform has a vulnerability due to improper escaping in the `SkinsCode.XWikiSkinsSheet` document. This allows attackers to execute arbitrary script macros, including Groovy and Python, leading to remote code execution and unrestricted access to wiki content.

A stack overflow was discovered in the page parameter in the function fromqossetting in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromSafeUrlFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromSafeMacFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromP2pListFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromSafeClientFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromDhcpListClient in Tenda F1202, FH1202, AC10, AC1206, AC7, AC5, and AC9 devices.

A stack overflow was discovered in the page parameter in the function fromNatStaticSetting in Tenda F1202, FH1202, AC10, AC1206, AC7, AC5, and AC9 devices.

A stack overflow was discovered in the page parameter in the function frmL7ProtForm in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

A stack overflow was discovered in the page parameter in the function fromRouteStatic in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.

The vm2 library, an advanced sandbox for Node.js, contains critical security issues and should not be used in production. In versions up to 3.9.19, `Promise` handler sanitization can be bypassed, allowing attackers to escape the sandbox and execute arbitrary code.

DedeCMS v5.7.109 has an arbitrary file upload vulnerability in /dede/file_manage_control.php that allows attackers to execute arbitrary code by uploading a crafted PHP file.

CVE-2023-35070 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in the VegaGroup Web Collection application.

CVE-2023-2957 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in the Lisa Software Florist Site. This issue affects versions before 3.0.

Podatność CVE-2023-1547 dotyczy niewłaściwej neutralizacji specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości wstrzyknięcia SQL poprzez manipulację parametrami SOAP oraz wykonania poleceń z linii komend. Problem ten dotyczy wersji Parkmatik przed 02.01-a51.

The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to and including 3.0.2. This allows authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server.

ModSecurity Core Rule Set up to version 3.3.4 does not detect multiple Content-Type request headers on some platforms, potentially allowing attackers to bypass a WAF with a crafted payload. This issue arises when the web application relies solely on the last Content-Type header.

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.

The SonicWall GMS and Analytics CAS Web Services application uses static values for authentication without proper checks, leading to an authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.