An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.
AFFECTED_PRODUCTS:
Yonyou Yonbip
Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types.
AFFECTED_PRODUCTS:
Ncratleos Terminal Handler
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
AFFECTED_PRODUCTS:
Yonyou Yonbip
YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.
AFFECTED_PRODUCTS:
Yonyou Yonbip
YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component.
AFFECTED_PRODUCTS:
Yonyou Yonbip
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
AFFECTED_PRODUCTS:
Weaver E Cology
File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server.
AFFECTED_PRODUCTS:
Ejinshan Terminal Security System
The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor with control of a compromised container registry can provide outdated versions of O...
AFFECTED_PRODUCTS:
Notaryproject Notation Go
Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.
AFFECTED_PRODUCTS:
Consensys Discovery
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.
AFFECTED_PRODUCTS:
Openlibraryfoundation Mod Data Export Spring,
Openlibraryfoundation Mod Data Export Spring
DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
AFFECTED_PRODUCTS:
Owasp Dependency Check,
Owasp Dependency Check
A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclose...
AFFECTED_PRODUCTS:
Leadshop Leadshop
A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of the file com/mldong/modules/wf/engine/model/DecisionModel.java. The manipulation leads to code injection. The attack may be initiated remotely. The exploit ha...
AFFECTED_PRODUCTS:
Garethhk Mldong
A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the publi...
AFFECTED_PRODUCTS:
Xlightftpd Xlight Ftp Server
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey...
AFFECTED_PRODUCTS:
Clickhouse Java Libraries
Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.
AFFECTED_PRODUCTS:
Openlibraryfoundation Mod Remote Storage,
Openlibraryfoundation Mod Remote Storage
Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...
AFFECTED_PRODUCTS:
Peteroupc Cbor
Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
AFFECTED_PRODUCTS:
Ls1Intum Artemis Java Test Sandbox
Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
AFFECTED_PRODUCTS:
Ls1Intum Artemis Java Test Sandbox
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
AFFECTED_PRODUCTS:
Ls1Intum Artemis Java Test Sandbox
AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
AFFECTED_PRODUCTS:
Amazon Aws Encryption Sdk,
Amazon Aws Encryption Sdk
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
AFFECTED_PRODUCTS:
Enonic Xp,
Enonic Xp
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` v...
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Jupyter Notebook,
Jupyter Jupyterlab
... (+1)
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the atta...
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Jupyter Notebook,
Jupyter Jupyterlab
MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
AFFECTED_PRODUCTS:
Ipb-Halle Molecularfaces
A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
AFFECTED_PRODUCTS:
Easy File Sharing Ftp Server Project Easy File Sharing Ftp Server
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has...
AFFECTED_PRODUCTS:
Mayurik Online Tours \& Travels Management System
A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the pu...
AFFECTED_PRODUCTS:
Smsot Smsot
A vulnerability was found in Smsot up to 2.12. It has been classified as critical. Affected is an unknown function of the file /api.php of the component HTTP POST Request Handler. The manipulation of the argument data[sign] leads to sql injection. It is possible to launch the attack remotely. The ex...
AFFECTED_PRODUCTS:
Smsot Smsot
Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating system commands. This arises from improper handling of untrusted input, enabling an attacker to elevate privileges, execute system commands, and potentially compromise the underlying...
AFFECTED_PRODUCTS:
Anomali Match,
Anomali Match,
Anomali Match
Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to CVE-2023-34092 -- with surface area...
AFFECTED_PRODUCTS:
Vitejs Vite,
Vitejs Vite,
Vitejs Vite
... (+1)
changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint `/api/v1/watch/<uuid>/history` can be accessed by any unauthorized user. As a result any unauthorized user can check one's watch history. However, because unauthorized p...
AFFECTED_PRODUCTS:
Changedetection Changedetection
FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected....
AFFECTED_PRODUCTS:
Freerdp Freerdp,
Freerdp Freerdp
A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may...
AFFECTED_PRODUCTS:
Pcman Ftp Server Project Pcman Ftp Server
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...
AFFECTED_PRODUCTS:
Pcman Ftp Server Project Pcman Ftp Server
Rejected reason: REJECT: This is a false positive report.
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service.
AFFECTED_PRODUCTS:
Lenovo App Store
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.
AFFECTED_PRODUCTS:
Lenovo Vantage
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.
AFFECTED_PRODUCTS:
Lenovo Vantage
An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier.
AFFECTED_PRODUCTS:
Lenovo Tab M8 Hd Tb8505f Firmware,
Lenovo Tab M8 Hd Tb8505fs Firmware,
Lenovo Tab M8 Hd Tb8505x Firmware
... (+1)
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.
AFFECTED_PRODUCTS:
Lenovo Tab M8 Hd Tb8505f Firmware,
Lenovo Tab M8 Hd Tb8505fs Firmware,
Lenovo Tab M8 Hd Tb8505x Firmware
... (+3)
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component.
AFFECTED_PRODUCTS:
Dom96 Httpbeast
An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.
AFFECTED_PRODUCTS:
Jester Project Jester
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).
AFFECTED_PRODUCTS:
Debian Debian Linux,
Python Pillow
RPTC 0x3b08c was discovered to not conduct status checks on the parameter tradingOpen. This vulnerability can allow attackers to conduct unauthorized transfer operations.
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36263. Reason: This record is a duplicate of CVE-2023-36263. Notes: All CVE users should reference CVE-2023-36263 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Nuc 8 Compute Element Cm8v5cb Firmware,
Intel Nuc 8 Compute Element Cm8v7cb Firmware
Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Nuc 7 Essential Pc Nuc7cjysal Firmware,
Intel Nuc Kit Nuc7cjyh Firmware,
Intel Nuc Kit Nuc7pjyh Firmware
... (+3)
Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Nuc Kit Nuc8i7bek Firmware,
Intel Nuc 8 Enthusiast Nuc8i7behga Firmware,
Intel Nuc 8 Enthusiast Nuc8i7bekqa Firmware
... (+10)