CVE Vulnerability Catalog

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

A vulnerability was identified in oretnom23 php-travel-agency-system affecting admin/customer_detail.php in the Admin Record Pages component. Manipulation of the costomer_id/ticket_id/emp_id/salary_id/page_id arguments leads to SQL injection, and the attack can be initiated remotely.

A SQL injection vulnerability exists in oretnom23 php-travel-agency-system in the file admin/customer_search.php. Manipulating the customer_name, voucher_no, or emp_name arguments allows SQL injection. The attack can be performed remotely and a public exploit is available.

An unrestricted upload vulnerability exists in oretnom23 php-travel-agency-system in admin/employee_insert.php via manipulation of the employee photo argument. An attacker can remotely upload arbitrary files. A public exploit is available.

TinyMCE versions 7.9.3 through 7.9.4 and 8.5.1 through 8.9.3 contain a stored XSS vulnerability in the media plugin. Elements crafted via data-mce-object can execute malicious scripts during processing before sanitization. The issue is fixed in 8.9.3 and 7.9.4.

Authlib (Python OAuth/OIDC library) versions 0.15 through 1.9.1 contain a flaw in the documented ClientConfigurationEndpoint.authenticate_client and check_permission implementations that fail to verify the credential belongs to the target client. This can allow reading, modifying, or deleting another client's registration. The issue is fixed in 1.9.1.

In EPICS Base 7.0.10 and earlier, insufficient validation of element or length values in a network message can cause an out-of-bounds read. This may lead to denial of service and expose adjacent memory contents.

In EPICS Base 7.0.10 and earlier, insufficient validation of element or length values in a network message can cause an out-of-bounds read. This may lead to denial of service and expose adjacent memory contents.

In EPICS Base 7.0.10 and earlier, improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.

Autodesk Fusion contains an Exposed Dangerous Function vulnerability via the TextCommands.LoadDll API command. A maliciously crafted dynamic library loaded from an arbitrary path can execute arbitrary code in the context of the current process.

GFI KerioConnect before 10.0.8 Patch 2 contains a stored XSS vulnerability in the Webmail component. An attacker can upload a crafted SVG email attachment that bypasses event-handler attribute sanitization and executes JavaScript in the victim's authenticated Webmail session. The exploit is actively used to steal credentials and mailbox contents.

In libXi before 1.8.4, a malicious X server can cause a heap overflow by injecting a large DEVICE_ENABLE reply. This may lead to a crash or potential code execution.

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.