CVE Vulnerability Catalog

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader, allowing it to load a JAR from a specified URL. This unbounded deserialization can lead to remote code execution.

Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php.

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution. By sending specially crafted packets to the PAPI UDP port (Aruba's access point management protocol), it is possible to gain access to the operating system as a privileged user.

Multiple underlying services contain buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets to the PAPI UDP port (Aruba's access point management protocol). Successful exploitation of these vulnerabilities allows arbitrary code execution as a privileged user on the underlying operating system.

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution. By sending specially crafted packets to the PAPI UDP port (Aruba's access point management protocol), it is possible to gain access to the operating system with privileged user rights.

Java object deserialization issue in Jackrabbit webapp/standalone allows remote code execution by an attacker. This affects RMIVersions up to 2.20.10 (stable branch) and 2.21.17 (unstable branch) using the 'commons-beanutils' component.

CVE-2023-35088 describes an improper neutralization of special elements used in an SQL command vulnerability in Apache InLong, which may lead to SQL injection attacks. The issue affects versions from 1.4.0 through 1.7.0.

The Infodrom Software E-Invoice Approval System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 20230701.

CVE-2023-3046 is a vulnerability related to improper neutralization of special elements used in SQL commands, allowing SQL Injection attacks in Biltay Technology's Scienta system. This issue affects versions before 20230630.1953.

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, allowing them to gain admin rights by editing the `isadmin` value in the request.

vm2 is an open source vm/sandbox for Node.js. In versions up to and including 3.9.19, the inspect function in Node.js allows attackers to escape the sandbox and run arbitrary code.

Metabase versions before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server at the server's privilege level. Exploitation does not require authentication.

A format string vulnerability has been identified in ASUS RT-AX56U V2 and RT-AC86U. This issue is caused by lacking validation for a specific value when calling the cm_processChangedConfigMsg function in the AiMesh system.

CVE-2023-37292 describes an improper neutralization of special elements used in OS commands, allowing OS command injection in iSherlock 4.5 and 5.5 user modules. This issue affects iSherlock 4.5 before iSherlock-user-4.5-174 and iSherlock 5.5 before iSherlock-user-5.5-174.

Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.

Version 1.414 of Millhouse-Project was found to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.

OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses in the SSO process, allowing attackers to impersonate any OpenAM user, including the administrator.