Archive
22 January 2024
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
High 7.5
CVE-2024-22233: Spring Framework server Web DoS Vulnerability
In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable when all of the following are true: * the applic…
-
High 7.5
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the …
-
Medium 6.1
Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote…
-
Low 3.5
LinZhaoguan pb-cms Comment cross site scripting
A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation with the input <div onmouseenter="alert("xss)"> leads to cr…
-
Medium 5.3
Any-Capture Any Sound Recorder Registration memory corruption
A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruptio…
-
High 7.8
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the f…
-
Critical 9.8
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code …
-
High 7.5
chasquid HTTP Request/Response Smuggling vulnerability
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
-
High 8.8
Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID …
-
Critical 9.8
darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remo…
-
High 8.8
Code execution in metagpt
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
-
Critical 9.8
Code execution in pandasai
GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language…
-
Critical 9.8
SQL injection in llama-index
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to de…
-
High 8.8
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders (and the fil…
-
Medium 5.5
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
-
High 8.8
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.
-
Critical 9.8
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects.
-
High 7.5
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with differen…