CVE Vulnerability Catalog

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system.

A vulnerability of Unrestricted Upload of File with Dangerous Type has been identified in the file uploading function in the InfoDoc Document On-line Submission and Approval System. This allows an unauthenticated remote attacker to exploit this vulnerability to upload and run arbitrary executable files and perform arbitrary system commands.

In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application.

Using '**' as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, leading to potential security bypass.

There is an absolute path traversal vulnerability in the GitHub repository mlflow/mlflow prior to version 2.5.0.

A remotely exploitable command injection vulnerability was found on Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.

Missing authentication for a critical function within the Kratos NGC Indoor Unit (IDU) before version 11.4 allows remote attackers to gain arbitrary control over the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests.

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it.

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

CVE-2023-34142 involves the cleartext transmission of sensitive information in Hitachi Device Manager on Windows and Linux. The issue affects Device Manager Server, Device Manager Agent, and Host Data Collector components and is present in versions before 8.8.5-02.

An issue was discovered in the Linux kernel before 6.3.10 related to the validation of command payload size in ksmbd, leading to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.8 related to the lack of validation of the NetBIOS header's length in relation to SMB header sizes in ksmbd. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before version 6.3.9, where ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.4 related to an off-by-one error in memory allocation in fs/ksmbd/connection.c, which may lead to out-of-bounds access.

An issue was discovered in the Linux kernel before version 6.3.4 in fs/ksmbd/smb2pdu.c, which does not properly check the UserName value. This leads to an out-of-bounds read.

An issue was discovered in the Linux kernel before 6.3.8 related to integer underflow and out-of-bounds read in the deassemble_neg_contexts function in fs/smb/server/smb2pdu.c in ksmbd.

An issue was discovered in the Linux kernel before version 6.3.4 related to an out-of-bounds read in smb2_find_context_vals. This occurs when the name_len of create_context is larger than the tag length.

CVE-2023-3724 affects TLS 1.3 clients that do not receive a PSK or KSE extension when connecting to a malicious server. In this case, a default predictable buffer is used for the IKM value, which may lead to session key compromise.