Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0.
AFFECTED_PRODUCTS:
Clear Clearml Server
Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – WooCommerce.This issue affects PayTR Taksit Tablosu – WooCommerce: from n/a through 1.3.1.
AFFECTED_PRODUCTS:
Paytr Paytr Taksit Tablosu Woocommerce
Cross-Site Request Forgery (CSRF) vulnerability in Kevin Ohashi WPPerformanceTester.This issue affects WPPerformanceTester: from n/a through 2.0.0.
AFFECTED_PRODUCTS:
Reviewsignal Wpperformancetester
Cross-Site Request Forgery (CSRF) vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21.
AFFECTED_PRODUCTS:
Quanticedge First Order Discount Woocommerce
Cross-Site Request Forgery (CSRF) vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5.
AFFECTED_PRODUCTS:
Palscode Multi Currency For Woocommerce
IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.
AFFECTED_PRODUCTS:
IBM Mq Appliance
Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 2.25.1.
AFFECTED_PRODUCTS:
Givewp Givewp
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.
AFFECTED_PRODUCTS:
Red Hat Data Grid
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
AFFECTED_PRODUCTS:
Red Hat Data Grid
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
AFFECTED_PRODUCTS:
Debian Debian Linux,
Red Hat Ansible Automation Platform,
Red Hat Ansible Automation Platform
... (+5)
A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of th...
AFFECTED_PRODUCTS:
Red Hat Service Interconnect
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.
AFFECTED_PRODUCTS:
Red Hat Satellite
A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
Perl Perl
... (+3)
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
AFFECTED_PRODUCTS:
Red Hat Jboss Enterprise Application Platform,
Red Hat Data Grid
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
AFFECTED_PRODUCTS:
Red Hat Jboss Enterprise Application Platform,
Red Hat Data Grid
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of...
AFFECTED_PRODUCTS:
Openimageio Openimageio
A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera.
AFFECTED_PRODUCTS:
Bosch Cpp13 Firmware,
Bosch Cpp14 Firmware
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attac...
AFFECTED_PRODUCTS:
Bosch Bosch Video Management System,
Bosch Configuration Manager,
Bosch Video Management System Viewer
... (+11)
An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
AFFECTED_PRODUCTS:
Bosch Video Recording Manager,
Bosch Video Streaming Gateway,
Bosch Video Streaming Gateway
... (+3)
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to t...
AFFECTED_PRODUCTS:
Bosch Cpp6 Firmware,
Bosch Cpp7 Firmware,
Bosch Cpp7.3 Firmware
... (+3)
Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.
AFFECTED_PRODUCTS:
Dell Emc Networker,
Dell Emc Networker
Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects Custom Post Type Page Template: from n/a through 1.1.
AFFECTED_PRODUCTS:
Wpgogo Custom Post Type Page Template
Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3.
AFFECTED_PRODUCTS:
Binarycarpenter Menu Bar Cart Icon For Woocommerce
Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue affects Caddy – Smart Side Cart for WooCommerce: from n/a through 1.9.7.
AFFECTED_PRODUCTS:
Madebytribe Caddy
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.
AFFECTED_PRODUCTS:
Zabbix Zabbix Agent2,
Zabbix Zabbix Agent2,
Zabbix Zabbix Agent2
... (+1)
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
AFFECTED_PRODUCTS:
Zabbix Zabbix Server,
Zabbix Zabbix Server,
Zabbix Zabbix Server
... (+2)
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
AFFECTED_PRODUCTS:
Zabbix Zabbix Agent,
Zabbix Zabbix Agent,
Zabbix Zabbix Agent
... (+1)
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
AFFECTED_PRODUCTS:
Zabbix Frontend,
Zabbix Frontend,
Zabbix Frontend
... (+3)
Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console.
AFFECTED_PRODUCTS:
Wso2 Identity Server,
Wso2 Identity Server,
Wso2 Identity Server
... (+32)
The api /api/snapshot and /api/get_log_file would allow unauthenticated access.
It could allow a DoS attack or get arbitrary files from FE node.
Please upgrade to 2.0.3 to fix these issues.
AFFECTED_PRODUCTS:
Apache Doris
The vulnerability exists in ADiTaaS (Allied Digital Integrated Tool-as-a-Service) version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable p...
AFFECTED_PRODUCTS:
Aditaas Allied Digital Integrated Tool As A Service
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
AFFECTED_PRODUCTS:
Lfprojects Mlflow
A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzip_file of the file kuiper/app/controllers/case_management.py of the component TAR Archive Handler. The manipulation of the argument dst_path leads to path traversal. It is possib...
AFFECTED_PRODUCTS:
Dfirkuiper Kuiper
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper authentica...
AFFECTED_PRODUCTS:
Codelyfe Stupid Simple Cms
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer over...
AFFECTED_PRODUCTS:
Totolink A7100ru Firmware
ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853.
AFFECTED_PRODUCTS:
Cryptopp Crypto\+\+
gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data for an F(2^m) curve, if the degree of each term in the polynomial is not strictly decreasing.
AFFECTED_PRODUCTS:
Cryptopp Crypto\+\+
Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
AFFECTED_PRODUCTS:
Cryptopp Crypto\+\+
A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects some unknown processing of the file user,adap.jsp?actionFlag=test&id=1 of the component Bind Request Handler. The manipulation leads to ldap injection. The attack may be initiated r...
AFFECTED_PRODUCTS:
Nxfilter Nxfilter
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
AFFECTED_PRODUCTS:
Redpanda Redpanda,
Redpanda Redpanda
A vulnerability classified as problematic was found in Jahastech NxFilter 4.3.2.5. This vulnerability affects unknown code of the file /config,admin.jsp. The manipulation of the argument admin_name leads to cross-site request forgery. The attack can be initiated remotely. VDB-248266 is the identifie...
AFFECTED_PRODUCTS:
Nxfilter Nxfilter
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit=1. The manipulation of the argument loginId leads to sql injection. It is possible to initiate the attack remotely. The...
AFFECTED_PRODUCTS:
Netentsec Application Security Gateway
A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner
AFFECTED_PRODUCTS:
GitLab Gitlab,
GitLab Gitlab,
GitLab Gitlab
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and may...
AFFECTED_PRODUCTS:
Codelyfe Stupid Simple Cms
A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.
AFFECTED_PRODUCTS:
HP System Management Homepage
A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os command...
AFFECTED_PRODUCTS:
Codelyfe Stupid Simple Cms
A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Affected by this issue is some unknown functionality of the file /settings/delete_file. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to t...
AFFECTED_PRODUCTS:
Rmountjoy92 Dashmachine
A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Affected by this vulnerability is an unknown functionality of the file /settings/save_config of the component Config Handler. The manipulation of the argument value_template leads to code injection. The exploit has...
AFFECTED_PRODUCTS:
Rmountjoy92 Dashmachine
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The ident...
AFFECTED_PRODUCTS:
Mayurik Best Courier Management System