CVE-2023-37154

The check_by_ssh component in Nagios nagios-plugins 2.4.5 is vulnerable to arbitrary command execution due to a failure to neutralize special elements in operating system commands. Specifically, an attacker can execute commands via ProxyCommand , LocalCommand , and PermitLocalCommand by using the...

CVE-2024-32608

The CVE-2024-32608 entry applies to the HDF5 library up to version 1.14.3, where memory corruption in H5A__close can corrupt the instruction pointer and lead to denial of service or potential code execution. Public references indicate a fix in HDF5 1.14.4, so upgrading to 1.14.4 or later mitigate...

CVE-2023-36325

The i2p anonymity networking project (versions before 2.3.0 ) is vulnerable to a correlation attack that can de-anonymize the public IPv4 and IPv6 addresses of i2p hidden services (eepsites). The root cause is a behavior discrepancy occurring when a tunneled, replayed message is processed, potent...

CVE-2023-46586

The weborf web server (versions 0.17, 0.18, 0.19, and 0.20 before 1.0 ) is vulnerable to a memory buffer issue in cgi.c . The flaw is caused by the misuse of strncpy , which results in a missing null terminator (\0) for CGI script paths. This vulnerability allows for improper restriction of opera...

CVE-2023-45361

MediaWiki is affected by an issue in the Vector Skin component, specifically within the VectorComponentUserLinks.php file. In versions before 1.39.5 and 1.40.x before 1.40.1 , the vector-intro-page fails to catch a MalformedTitleException when it encounters an invalid title. This leads to the dis...

CVE-2023-45359

An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can have markup...

CVE-2022-25775

CVE-2022-25775 affects Mautic, specifically the Reports bundle. The vulnerability is an SQL injection in dynamic Reports, allowing an authenticated, logged-in user to retrieve and alter data, potentially exposing sensitive information, compromising credentials, and, depending on database permissi...

CVE-2022-25774

CVE-2022-25774 affects Mautic prior to 4.4.12. A self‑XSS in the notifications you save for Dashboards allows logged‑in users to inject/execute JavaScript in the notification content. Remediation: update to Mautic 4.4.12 or later. No exploitation details are provided in the supplied documents.

CVE-2022-25769

CVE-2022-25769 relates to Mautic where the default .htaccess contains an improper regex in the htaccess FilesMatch rule that only checks the filename, not the full path. This logic flaw allows improper access control and could enable unauthorized access to restricted PHP files in the root directo...

CVE-2024-22303

CVE-2024-22303 is an Incorrect Privilege Assignment vulnerability in the favethemes Houzez WordPress theme (affected versions “n/a through 3.2.4”). The issue allows Privilege Escalation for authenticated users (Subscriber+). CVSS v3.1 base score 8.8 (HIGH) with network exposure, low attack comple...

CVE-2024-21743

CVE-2024-21743 is a Privilege Escalation in the favethemes Houzez Login Register WordPress plugin (houzez-login-register) affecting versions ≤ 3.2.5. The issue enables authenticated users (Subscriber level) to escalate privileges, effectively via an account takeover vector; it is described as a S...

CVE-2023-46809

Versions of Node.js that bundle unpatched OpenSSL or run against unpatched dynamically linked versions of OpenSSL are vulnerable to the Marvin Attack (CVE-2023-46809). The root cause is the acceptance of PKCS #1 v1.5 padding during RSA decryption using a private key. This vulnerability has been a...

CVE-2023-46809

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https://people.redhat.com/hkario/marvin/, if PCKS 1 v1.5 padding is allowed when performing RSA descryption using a privat...

CVE-2023-39333

Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module. This vulnerability...

CVE-2023-30587

A vulnerability in Node.js version 20 allows a remote attacker to bypass security restrictions set by the --experimental-permission flag. The root cause is located in the built-in inspector module (node:inspector) , where an attacker can exploit the Worker class 's ability to create an "internal ...

CVE-2023-30587

A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module node:inspector. By exploiting the Worker class's ability to create an "internal worker" with the kIsInternal Symbol, attackers can modify the...

CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

CVE-2023-30583

The Node.js environment (specifically version 20) is vulnerable to a security restriction bypass via the fs.openAsBlob() API. Due to a missing check in this API, a remote attacker can bypass the experimental permission model when the file system read restriction is active using the --allow-fs-rea...

RHEL 8 : kernel (RHSA-2024:4731)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4731 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: GSM multiplexing race conditio...

CVE-2023-7012

CVE-2023-7012 affects Google Chrome’s Permission Prompts due to insufficient data validation, potentially enabling a sandbox escape when a user runs a malicious app. Described for Chrome versions before 117.0.5938.62; exploitation requires user interaction and a malicious file. Astra Linux bullet...