CWE-184 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-184/ Sun, 26 Feb 2023 09:05:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-184 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-184/ 32 32 CVE-2007-1343 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1343/ Sun, 26 Feb 2023 09:05:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1343/ includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that probably include remote file inclusion and other issues.

The post CVE-2007-1343 appeared first on CVE Vulnerability.

]]> includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that probably include remote file inclusion and other issues.

The post CVE-2007-1343 appeared first on CVE Vulnerability.

]]> CVE-2018-7489 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7489/ Sun, 26 Feb 2023 06:51:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7489/ FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in […]

The post CVE-2018-7489 appeared first on CVE Vulnerability.

]]> FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.

The post CVE-2018-7489 appeared first on CVE Vulnerability.

]]> CVE-2018-6383 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6383/ Sun, 26 Feb 2023 06:50:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6383/ Monstra CMS through 3.0.4 has an incomplete “forbidden types” list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-18048.

The post CVE-2018-6383 appeared first on CVE Vulnerability.

]]> Monstra CMS through 3.0.4 has an incomplete “forbidden types” list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-18048.

The post CVE-2018-6383 appeared first on CVE Vulnerability.

]]> CVE-2018-5968 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5968/ Sun, 26 Feb 2023 06:50:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5968/ FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

The post CVE-2018-5968 appeared first on CVE Vulnerability.

]]> FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

The post CVE-2018-5968 appeared first on CVE Vulnerability.

]]> CVE-2018-16863 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16863/ Sun, 26 Feb 2023 06:47:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16863/ It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

The post CVE-2018-16863 appeared first on CVE Vulnerability.

]]> It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

The post CVE-2018-16863 appeared first on CVE Vulnerability.

]]> CVE-2020-14372 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-14372/ Sun, 26 Feb 2023 06:37:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-14372/ A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. […]

The post CVE-2020-14372 appeared first on CVE Vulnerability.

]]> A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel, defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity, as well as system availability.

The post CVE-2020-14372 appeared first on CVE Vulnerability.

]]> CVE-2019-9212 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9212/ Sun, 26 Feb 2023 06:34:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9212/ ** DISPUTED ** SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XString is mishandled, related to Resin Gadget. NOTE: The vendor doesn’t consider this issue a vulnerability because the blacklist is being misused. SOFA Hessian supports custom blacklist and a disclaimer was […]

The post CVE-2019-9212 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XString is mishandled, related to Resin Gadget. NOTE: The vendor doesn’t consider this issue a vulnerability because the blacklist is being misused. SOFA Hessian supports custom blacklist and a disclaimer was posted encouraging users to update the blacklist or to use the whitelist feature for their specific needs since the blacklist is not being actively updated.

The post CVE-2019-9212 appeared first on CVE Vulnerability.

]]> CVE-2021-21697 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-21697/ Thu, 23 Feb 2023 14:07:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-21697/ Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

The post CVE-2021-21697 appeared first on CVE Vulnerability.

]]> Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

The post CVE-2021-21697 appeared first on CVE Vulnerability.

]]> CVE-2021-1255 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1255/ Thu, 23 Feb 2023 14:06:25 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1255/ Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.

The post CVE-2021-1255 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.

The post CVE-2021-1255 appeared first on CVE Vulnerability.

]]> CVE-2021-1133 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1133/ Thu, 23 Feb 2023 14:06:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1133/ Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.

The post CVE-2021-1133 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.

The post CVE-2021-1133 appeared first on CVE Vulnerability.

]]>