BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
AFFECTED_PRODUCTS:
Bacnetstack Bacnet Stack
The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
AFFECTED_PRODUCTS:
Dvsekhvalnov Jose2go
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (8.5 and earlier are unaffected.)
AFFECTED_PRODUCTS:
Concretecms Concrete Cms
Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross Site Request Forgery (CSRF) via ccm/calendar/dialogs/event/delete/submit. An attacker can force an admin to delete events on the site because the event ID is numeric and sequential.
AFFECTED_PRODUCTS:
Concretecms Concrete Cms,
Concretecms Concrete Cms
Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit.
AFFECTED_PRODUCTS:
Concretecms Concrete Cms
Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable to an admin adding a stored XSS payload via the Layout Preset name.
AFFECTED_PRODUCTS:
Concretecms Concrete Cms,
Concretecms Concrete Cms
Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement. To exploit this vulnerability, the request to set...
AFFECTED_PRODUCTS:
Decidim Decidim,
Decidim Decidim
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue r...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user in...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user in...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user in...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user in...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue r...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics.
AFFECTED_PRODUCTS:
Couchbase Couchbase Server
An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and 4.4.0 through 4.6.8 before 4.6.9. An administrator with write access to the SNS firewall can configure a login disclaimer wit...
AFFECTED_PRODUCTS:
Stormshield Stormshield Network Security,
Stormshield Stormshield Network Security,
Stormshield Stormshield Network Security
... (+1)
An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201.
AFFECTED_PRODUCTS:
IBM Watson Iot Platform
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.
AFFECTED_PRODUCTS:
Hcltech Bigfix Platform,
Hcltech Bigfix Platform,
Hcltech Bigfix Platform
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information.
AFFECTED_PRODUCTS:
Hcltech Bigfix Platform,
Hcltech Bigfix Platform,
Hcltech Bigfix Platform
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530.
AFFECTED_PRODUCTS:
Hcltech Bigfix Platform,
Hcltech Bigfix Platform,
Hcltech Bigfix Platform
Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in the Domino® Administrator are secured using a cryptographically weak hash algorithm. This could enable attackers with access to the hashed value to determine a...
AFFECTED_PRODUCTS:
Hcltech Domino
In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 through 4.6.5 before 4.6.6, and 4.7.0 before 4.7.1, the usage of a Network object created from an inactive DHCP interface in the filtering slot re...
AFFECTED_PRODUCTS:
Stormshield Stormshield Network Security,
Stormshield Stormshield Network Security,
Stormshield Stormshield Network Security
... (+2)
openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (in the Saved Search Activity) via the Name, Description, or Activity Number field.
AFFECTED_PRODUCTS:
Opencrx Opencrx
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 24759...
AFFECTED_PRODUCTS:
IBM Security Guardium Key Lifecycle Manager
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620.
AFFECTED_PRODUCTS:
IBM Security Guardium Key Lifecycle Manager
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document.
AFFECTED_PRODUCTS:
Lynchjames Obsidian Mind Map
An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager.
AFFECTED_PRODUCTS:
Rws Worldserver
An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interface, leading to command execution.
AFFECTED_PRODUCTS:
Rws Worldserver
Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Rack Rack,
Rack Rack
... (+1)
Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Uti...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Rack Rack,
Rack Rack
Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.
AFFECTED_PRODUCTS:
Debian Debian Linux,
Rack Rack,
Rack Rack
An issue in uverif v.2.0 allows a remote attacker to obtain sensitive information.
AFFECTED_PRODUCTS:
Dagg Uverif
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component.
AFFECTED_PRODUCTS:
Sem-Cms Semcms
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B ar...
AFFECTED_PRODUCTS:
Elecom Wrc 2533gst2 Firmware,
Elecom Wrc 1167gst2 Firmware,
Elecom Wrc 2533gs2 B Firmware
... (+8)
Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file.
AFFECTED_PRODUCTS:
Xnview Nconvert
ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web brow...
AFFECTED_PRODUCTS:
Elecom Wrc 2533gst2 Firmware,
Elecom Wrc 1167gst2 Firmware,
Elecom Wrc 2533gs2 B Firmware
... (+7)
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.
AFFECTED_PRODUCTS:
Hitachi Vantara Pentaho Data Integration And Analytics,
Hitachi Vantara Pentaho Data Integration And Analytics
An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component.
AFFECTED_PRODUCTS:
Open-Emr Openemr
An issue exists within Piwigo before v.14.2.0 allowing a malicious user to take over the application. This exploit involves chaining a Cross Site Request Forgery vulnerability to issue a Stored Cross Site Scripting payload stored within an Admin user's dashboard, executing remote JavaScript. This ca...
AFFECTED_PRODUCTS:
Piwigo Piwigo
An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings.php component.
AFFECTED_PRODUCTS:
Codeastro Membership Management System
A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the membershipType parameter in the add_type.php component.
AFFECTED_PRODUCTS:
Codeastro Membership Management System
A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the add_type.php component.
AFFECTED_PRODUCTS:
Codeastro Membership Management System
A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php component.
AFFECTED_PRODUCTS:
Codeastro Membership Management System