SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration backup, that would normally be barred to those specific admin...
AFFECTED_PRODUCTS:
Hitachi System Management Unit Firmware
A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.
AFFECTED_PRODUCTS:
Openjournalsystems Open Journal Systems
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit
document type definition (DTD) references to external entities.
This means that if a user chooses to use a malicious report definition XML file containing an external entity reference
to gener...
AFFECTED_PRODUCTS:
Eclipse Memory Analyzer
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
AFFECTED_PRODUCTS:
Totolink A7000r Firmware
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.
AFFECTED_PRODUCTS:
Totolink A7000r Firmware
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.
In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Debian Debian Linux,
Fedoraproject Fedora
... (+2)
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins.
In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to run...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Debian Debian Linux,
Fedoraproject Fedora
... (+2)
An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restrictions and achieve RCE (Rem...
AFFECTED_PRODUCTS:
Hyland Alfresco Content Services
This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
AFFECTED_PRODUCTS:
Frauscher Frauscher Diagnostic System 102
decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation.
AFFECTED_PRODUCTS:
Jqlang Jq
An oversight in BCB handling of reboot reason that allows for persistent code execution
AFFECTED_PRODUCTS:
Google Chromecast Firmware
U-Boot vulnerability resulting in persistent Code ExecutionÂ
AFFECTED_PRODUCTS:
Google Chromecast Firmware
U-Boot shell vulnerability resulting in Privilege escalation in a production device
AFFECTED_PRODUCTS:
Google Chromecast Firmware
Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
AFFECTED_PRODUCTS:
Google Chromecast Firmware
A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. This issue affects some unknown processing of the file /libsystem/login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. T...
AFFECTED_PRODUCTS:
Campcodes Student Clearance System
A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user.
AFFECTED_PRODUCTS:
Monicahq Monica
A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=save_attendance. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the pu...
AFFECTED_PRODUCTS:
Oretnom23 Simple Student Attendance System
The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restric...
AFFECTED_PRODUCTS:
Caddyserver Caddy
A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/student_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. T...
AFFECTED_PRODUCTS:
Oretnom23 Simple Student Attendance System
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. It has been rated as critical. Affected by this issue is some unknown functionality of the file DFLIMG/DFLJPG.py. The manipulation leads to deserialization. The attack may be launched remot...
AFFECTED_PRODUCTS:
Iperov Deepfacelab
An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions.
AFFECTED_PRODUCTS:
Zammad Zammad,
Zammad Zammad
An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.
AFFECTED_PRODUCTS:
Zammad Zammad,
Zammad Zammad
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
AFFECTED_PRODUCTS:
Zammad Zammad,
Zammad Zammad
An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.
AFFECTED_PRODUCTS:
Zammad Zammad,
Zammad Zammad
An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public.
AFFECTED_PRODUCTS:
Zammad Zammad,
Zammad Zammad
Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.
AFFECTED_PRODUCTS:
Semantic-Mediawiki Semantic Mediawiki
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would af...
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
PostgreSQL Postgresql
... (+39)
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing spec...
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
Red Hat Enterprise Linux Desktop
... (+46)
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentiall...
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
PostgreSQL Postgresql
... (+39)
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.
AFFECTED_PRODUCTS:
Jfinalcms Project Jfinalcms
An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM.
AFFECTED_PRODUCTS:
Mullvad Mullvad Vpn
A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument par...
AFFECTED_PRODUCTS:
Hrp2000 E Hr
A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit...
AFFECTED_PRODUCTS:
Phpems Phpems,
Phpems Phpems
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to cross-s...
AFFECTED_PRODUCTS:
Phpgurukul Teacher Subject Allocation Management System
A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the pu...
AFFECTED_PRODUCTS:
Carmelogarcia Matrimonial Site
A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unknown function of the file /auth/auth.php?user=1. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
AFFECTED_PRODUCTS:
Carmelogarcia Matrimonial Site
A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploit h...
AFFECTED_PRODUCTS:
Oretnom23 Simple Invoice Generator System
A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input <script>alert(5)</script> leads to cross site scripti...
AFFECTED_PRODUCTS:
Phpgurukul Teacher Subject Allocation Management System
A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remo...
AFFECTED_PRODUCTS:
Phpgurukul Nipah Virus Testing Management System
A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unknown functionality. The manipulation of the argument Type leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used....
AFFECTED_PRODUCTS:
Amttgroup Hibos
sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info->pad0 is not initialized.
AFFECTED_PRODUCTS:
Linux Linux Kernel
A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to ver...
AFFECTED_PRODUCTS:
Sissbruecker Linkding
The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol (SDCP) when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello authentica...
IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.
AFFECTED_PRODUCTS:
Izybat Orange Casiers
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bit...
AFFECTED_PRODUCTS:
Bitcoin Bitcoin Core,
Bitcoinknots Bitcoin Knots
SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the application.
AFFECTED_PRODUCTS:
Antonymale Synctrayzor
An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface.
AFFECTED_PRODUCTS:
Draytek Vigor167 Firmware
The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary locations on the server.
AFFECTED_PRODUCTS:
Welcart Welcart E Commerce
The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX action...
AFFECTED_PRODUCTS:
Supsystic Digital Publications By Supsystic
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong class in src/media_tools/avilib.c in gpac/MP4Box.
AFFECTED_PRODUCTS:
Gpac Gpac