CVE Vulnerability Catalog

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

IBM Concert versions 1.0.0 through 2.0.0 use weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information.

Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.

YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article management functionality. The issue is in the add() and getPost() functions within ArticleAction.class.php due to improper neutralization of user input in the article title field.

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php. This allows an attacker to inject malicious scripts into the page, which can be executed in the victim's browser.

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in tag_key validation logic that fails to enforce exact key-length matching. This allows an attacker with access to these endpoints to manipulate tags and redirect records to unintended destinations. This can lead to injection of forged data and routing manipulation.

Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing path traversal sequences that cause Fluent Bit to write files outside the intended output directory.

The in_forward input plugin in Fluent Bit does not properly enforce the security.users authentication mechanism under certain configuration conditions. Remote attackers with network access to the Fluent Bit instance exposing the forward input can send unauthenticated data.

Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them.

Cross-Site Scripting (XSS) vulnerability stored in the Taclia web application, where the uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of any user who accesses the compromised resource.

A Server-Side Request Forgery (SSRF) vulnerability was found in Streamity Xtream IPTV Player up to version 2.8, in the file public/proxy.php. The flaw can be exploited remotely and a public exploit is already available. Version 2.8.1 contains the fix (commit c70bfb8d36b47bfd64c5ec73917e1d9ddb97af92).

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. Manipulation of the txtconfirm_password argument causes SQL injection, exploitable remotely. The exploit has been published and may be used.

The Guest posting / Frontend Posting / Front Editor WordPress plugin before version 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue. This affects versions prior to 5.0.0.

The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configurations, allowing unauthenticated users to fetch a log that discloses the backup filename. The backup archive is then downloadable without authentication.

FMS developed by Otsuka Information Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript in the user's browser through phishing attacks.

SQL injection vulnerability in /schedule_edit1.php of itsourcecode Student Information System 1.0. Manipulation of the schedule_id argument allows remote SQL injection. The exploit is publicly available.

SQL injection vulnerability in /mail.php of code-projects Library System 1.0. Manipulation of the ID argument leads to SQL injection. Attack can be performed remotely, exploit is public.

SQL injection vulnerability in /return.php of code-projects Library System 1.0. Manipulation of the ID argument results in SQL injection. Attack can be launched remotely, exploit is public.