CVE Vulnerability Catalog

A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

An unrestricted file upload vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0 in /admin/admin_running.php via manipulation of the product_image argument. The attack can be launched remotely and a public exploit is available.

A vulnerability exists in an unknown part of the file /section_edit1.php in itsourcecode Student Information System 1.0. Manipulation of the ID argument leads to SQL injection. Remote exploitation is possible, and the exploit has been publicly disclosed and may be used.

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security flaw was discovered in code-projects Employee Profile Management System 1.0 allowing unrestricted file upload. Manipulating the per_file argument in /profiling/add_file_query.php enables remote attacks. The exploit has been released publicly and may be used.

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing a manipulation of the argument per_id can lead to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was identified in Yonyou U8 Cloud versions 5.0, 5.0sp, 5.1, and 5.1sp, where manipulation of the usercode argument in the file nc/pubitf/erm/mobile/appservice/AppServletService.class leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available. The vendor was contacted but did not respond.

A vulnerability was determined in SGAI Space1 NAS N1211DS up to version 1.0.915 in the RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD functions of /cgi-bin/JSONAPI in the gsaiagent component. The manipulation causes command injection, and the attack may be initiated remotely. The exploit has been publicly disclosed and the vendor did not respond to the disclosure.

A vulnerability in SGAI Space1 NAS N1211DS up to version 1.0.915 affects the GET_FACTORY_INFO/GET_USER_INFO functions in the /cgi-bin/JSONAPI file of the gsaiagent component. Manipulation results in unprotected storage of credentials. The attack can be launched remotely, and the exploit has been made public.

In Sobey Media Convergence System 2.0/2.1, there is a path traversal vulnerability in /sobey-mchEditor/watermark/upload. Manipulating the File argument allows remote access to files outside the intended directory.

A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. The function OtherEmbedding.aencode in /src/models/embed.py is affected. Manipulation of the argument health_url results in server-side request forgery. The attack can be initiated remotely and the exploit is public.

An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to Password authentication for SFTP to still login using their SSH key.

Frappe Learning Management System (LMS) prior to 2.41.0 has a flaw in server-side authorization logic that allowed authenticated users to perform actions beyond their assigned roles across multiple features. Because affected endpoints relied on client-side or UI-level checks instead of enforcing permissions on the server, users with low-privileged roles (such as students) could perform operations intended only for instructors or administrators via directly using the APIs. This vulnerability is fixed in 2.41.0.

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and 1.15.2, a bug in the permission logic allowed users with "Can share" permission to modify the permissions of other recipients. This vulnerability is fixed in 1.14.6 and 1.15.2.

Nextcloud Tables before versions 0.8.6 and 0.9.3 allows a malicious user to create their own table and then move a column to a victim's table. This vulnerability is fixed in versions 0.8.6 and 0.9.3.

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/defined endpoint. When an authenticated user creates a task, the defined_name value is stored and later rendered without HTML sanitization. An attacker can inject malicious script that executes in the browser of users viewing the task.

A flaw was found in util-linux that allows a heap buffer overread when processing 256-byte usernames in the `setpwnam()` function. This affects SUID login-utils utilities that write to the password database.

A file upload vulnerability in Fanvil x210 V2 version 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the filesystem.

An issue was discovered in Fanvil x210 V2 version 2.12.20 that allows unauthenticated attackers on the local network to execute arbitrary system commands.

W python-apt występuje dereferencja wskaźnika NULL w funkcji TagSection.keys(), co pozwala lokalnemu atakującemu na spowodowanie awarii procesu (denial of service) poprzez przygotowany plik deb822 z nieprawidłowym kluczem niebędącym w formacie UTF-8.