By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ORIZON has to be modified to prevent this vulnerability.
By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZEDMAIL has to be modified to prevent this vulnerability.
Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected devices in plaintext.
GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17.
AFFECTED_PRODUCTS:
Glpi-Project Glpi
GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17.
AFFECTED_PRODUCTS:
Glpi-Project Glpi
Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resour...
An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF.
A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a PDU Session Resource Setup Response with an empty Response Item list.
A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some unknown processing of the file cgReportController.do of the component AuthInterceptor. The manipulation of the argument begin_date leads to sql injection. The attack may be initiated...
AFFECTED_PRODUCTS:
Huayi-Tec Jeewms
A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /model/editProduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has b...
AFFECTED_PRODUCTS:
Code-Projects Inventory Management
Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.
Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved in the session storage (Redis or disk), but it would allow a malicious process that gains access to th...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
... (+3)
Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 the...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloading bigger websites than intended, to find open-graph data. It is recommended that the Nextcloud Server is upgraded to 28.0.10 or 29.0.7 and Nextclou...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got access to a backup of the database and the Nextcloud config file, would be able to decrypt them. It is recommended that the Nextcloud Server is upgraded t...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would be able to create, change or delete external storages without having to confirm the password. It is recommended that the Nextcloud Server is upgraded to...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session of a user. It is recommended that the Ne...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
... (+3)
Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 or 2...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
... (+1)
Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the other file instead. It is recommended th...
AFFECTED_PRODUCTS:
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server,
Nextcloud Nextcloud Server
... (+3)
emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript code in published articles.
AFFECTED_PRODUCTS:
Emlog Emlog
lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
AFFECTED_PRODUCTS:
Pickmall Lilishop
CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.
AFFECTED_PRODUCTS:
Crmeb Crmeb
Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.
AFFECTED_PRODUCTS:
Gogs Gogs
IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
AFFECTED_PRODUCTS:
IBM Engineering Lifecycle Optimization Engineering Insights,
IBM Engineering Lifecycle Optimization Engineering Insights
A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. Th...
AFFECTED_PRODUCTS:
Tenda Ac10 Firmware
A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Inventory Page. The manipulation of the argument brand leads to cros...
AFFECTED_PRODUCTS:
Oretnom23 Online Eyewear Shop
A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device.
This vulnerability is due to differences in authentication responses that are sent back from the application...
AFFECTED_PRODUCTS:
Cisco Enterprise Chat And Email
A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.
The vulnerability exists because the web-based management interface does not properly validate user...
AFFECTED_PRODUCTS:
Cisco Enterprise Chat And Email
A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic.
This vulnerability is due to incomplete processing during deep p...
AFFECTED_PRODUCTS:
Cisco Firepower Threat Defense Software,
Cisco Firepower Threat Defense Software,
Cisco Firepower Threat Defense Software
... (+1)
A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands with root privileges on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation...
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device.
This...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+1)
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device.
This vulne...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP.
The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this...
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device.
This vulnerability is due to insufficient file scope limiting. An attacker could exploit thi...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+60)
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition.
This vulnerability is due to improper input validation of user-supplied input to the de...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+55)
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system.
This vulnerability is due to improper handling of XML External Entity (XXE) entries when the affected...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+59)
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain access to sensitive information on an affected system.
This vulnerability is due to insufficient authorization checks....
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+61)
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affected system.
This vulnerability is due to insufficient input validation by the web-based management...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+61)
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to improper input validation of SQL queries to an affected system. An attacker...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+46)
A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause a buffer overflow on an affected system, resulting in a denial of service (DoS) condition.
The vulnerability is due to incomplete bounds checks for data that is pr...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+35)
A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain restricted access to the configuration information of an affected system.
This vulnerability exists because the affected software has insufficient input vali...
AFFECTED_PRODUCTS:
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager,
Cisco Catalyst Sd Wan Manager
... (+39)
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2414. Reason: This candidate is a reservation duplicate of CVE-2023-2414. Notes: All CVE users should reference CVE-2023-2414 instead of this candidate. All references and descriptions in this candidate have been re...
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2414. Reason: This candidate is a reservation duplicate of CVE-2023-2414. Notes: All CVE users should reference CVE-2023-2414 instead of this candidate. All references and descriptions in this candidate have been r...
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script
AFFECTED_PRODUCTS:
Jetbrains Webstorm
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Services" tab of the Device page allows authenticated users to inject arbitrary JavaScript through the "descr" parameter when adding a service to a device. This vulne...
AFFECTED_PRODUCTS:
Librenms Librenms
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Custom OID" tab of a device allows authenticated users to inject arbitrary JavaScript through the "unit" parameter when creating a new OID. This vulnerability can lea...
AFFECTED_PRODUCTS:
Librenms Librenms
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Reflected Cross-Site Scripting (XSS) vulnerability in the "metric" parameter of the "/wireless" and "/health" endpoints allows attackers to inject arbitrary JavaScript. This vulnerability results in the execution of malici...
AFFECTED_PRODUCTS:
Librenms Librenms
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the Device Overview page allows authenticated users to inject arbitrary JavaScript through the "overwrite_ip" parameter when editing a device. This vulnerability results i...
AFFECTED_PRODUCTS:
Librenms Librenms
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Port Settings" page allows authenticated users to inject arbitrary JavaScript through the "descr" parameter when editing a device's port settings. This vulnerability...
AFFECTED_PRODUCTS:
Librenms Librenms