CVE Vulnerability Catalog

A vulnerability in Simple Food Ordering System 1.0 affects the /listorder.php file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=state file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.

A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=city file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed.

A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=people file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been published.

A vulnerability was detected in itsourcecode COVID Tracking System 1.0 affecting an unknown function of the file /admin/?page=establishment. Manipulation of the ID argument results in SQL injection.

A weakness was identified in SourceCodester Inventory Management System 1.0 in an unknown function of /model/user/resetPassword.php, leading to weak password recovery. The attack can be performed remotely and a public exploit is available.

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. The function removefile in app/controllers/FilehelperController.php is affected. Manipulation of the argument filepath results in denial of service. The attack can be carried out remotely and the exploit has been released.

Improper input validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.

SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union (+) and that union references the same relation on both sides (but one side arrows to a different permission). Then SpiceDB may have missing LookupResources results when checking the permission. This only affects LookupResources; other APIs calculate permissionship correctly. The issue is fixed in version 1.47.1.

A parsing issue in the handling of directory paths was addressed with improved path validation. This affects macOS Sequoia 15.5, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3. An app may be able to access sensitive user data.

Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner. Users with the scoped Project Manager user role with the Global User Read access permission enabled access to certain Project Administrator functionalities which should have been inaccessible. Exploitation does not grant full system control, but it may enable unauthorized changes to project configurations or access to system sensitive information.

IBM Concert Software versions 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim, potentially leading to unintended actions on behalf of the user.

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

Wazuh is an open source security detection, visibility, and compliance project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the /utils/configuration endpoint.

Terraform Enterprise versions prior to 1.1.1 and 1.0.3 allow a user with specific but insufficient permissions to create state versions in a workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or auto-applied.

The Chat Help plugin by ThemeAtelier contains a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.1.3.

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fluentcrm_content' shortcode in all versions up to, and including, 2.9.84 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_remove_agent' function in all versions up to and including 3.3.1. This allows authenticated attackers with Subscriber-level access and above to remove the role and capabilities of any user with an Administrator, WSDesk Supervisor, or WSDesk Agents role.

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'eh_crm_ticket_single_view_client' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of all support tickets.

The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr_title_tag' and 'mpdpr_subtitle_tag' parameters in the MPD Pricing Table widget in all versions up to and including 1.1.29 due to insufficient input sanitization and output escaping on user-supplied HTML tag names. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.