Vuldb Updates

A vulnerability categorized as critical has been discovered in parse-server up to 6.4.x/7.0.0-alpha.19 on Node.js. The impacted element is an unknown function of the component PostgreSQL Handler. The manipulation results in sql injection. This vulnerability was named CVE-2024-27298. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability marked as critical has been reported in app-builder-lib. Affected is an unknown function of the component NSIS Installer. The manipulation leads to untrusted search path. This vulnerability is traded as CVE-2024-27303. An attack has to be approached locally. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in esphome. It has been classified as problematic. This affects an unknown part of the component Edit Configuration File API. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2024-27287. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in acryldata datahub-helm up to 0.2.181. The affected element is an unknown function. This manipulation causes use of default cryptographic key. This vulnerability is tracked as CVE-2024-29037. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Mozilla neqo up to 0.13.2. It has been declared as problematic. This affects an unknown function. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-6703. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as problematic has been detected in Linux Kernel up to 5.18.17/5.19.1. This affects the function jit_subprogs of the component bpf. Performing manipulation results in privilege escalation. This vulnerability is identified as CVE-2022-50168. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Chanjet CRM 1.0. This affects an unknown part of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID results in sql injection. This vulnerability is known as CVE-2025-6132. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability marked as critical has been reported in tcpdump up to 4.9.2. This affects the function print_prefix of the file print-hncp.c of the component HNCP Parser. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2018-16228. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in tcpdump up to 4.9.2. Affected is the function bgp_attr_print of the file print-bgp.c of the component BGP Parser. Performing manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2018-16230. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in tcpdump up to 4.9.2. Affected by this vulnerability is the function bgp_attr_print of the file print-bgp.c of the component BGP Parser. Executing manipulation can lead to uncontrolled recursion. This vulnerability is tracked as CVE-2018-16300. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, was found in tcpdump up to 4.9.2. This affects the function print_trans of the file print-smb.c of the component SMB Parser. The manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2018-16451. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in tcpdump up to 4.9.2 and classified as problematic. This vulnerability affects the function smb_fdata of the file smbutil.c of the component SMB Parser. This manipulation causes uncontrolled recursion. This vulnerability is registered as CVE-2018-16452. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in tcpdump up to 4.9.2. This impacts the function vrrp_print of the file print-vrrp.c of the component VRRP Parser. The manipulation leads to buffer over-read. This vulnerability is referenced as CVE-2019-15167. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in qiskit-ibm-runtime up to 0.21.1. This affects the function qiskit_ibm_runtime.RuntimeDecoder. The manipulation leads to deserialization. This vulnerability is documented as CVE-2024-29032. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in oauthenticator 0.6.2/0.7.2/0.7.3/0.12.0. This affects the function GoogleOAuthenticator.hosted_domain. Executing manipulation can lead to improper authorization. This vulnerability appears as CVE-2024-29033. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Saleor Storefront. It has been rated as problematic. This affects the function createSaleorAuthClient of the component Authentication Handler. Performing manipulation results in information disclosure. This vulnerability was named CVE-2024-29036. The attack may be initiated remotely. There is no available exploit. To fix this issue, it is recommended to deploy a patch.

A vulnerability classified as critical was found in FirebirdSQL Firebird. Affected by this vulnerability is an unknown functionality of the component SET BIND Statement Handler. Executing manipulation can lead to allocation of resources. This vulnerability appears as CVE-2023-41038. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in openvswitch. Affected is an unknown function of the component LLDP Packet Handler. This manipulation causes resource consumption. This vulnerability is registered as CVE-2020-27827. The attack requires access to the local network. No exploit is available.

A vulnerability categorized as problematic has been discovered in GNU C Library up to 2.28. The impacted element is the function getaddrinfo. The manipulation as part of Hostname results in improper input validation. This vulnerability is cataloged as CVE-2018-19591. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in libpcap up to 1.9.0. It has been classified as critical. This affects an unknown function of the file sf-pcapng.c of the component PHB Header Handler. The manipulation leads to allocation of resources. This vulnerability is documented as CVE-2019-15165. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.