CVE Vulnerability Catalog

Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh) for supported Mac and Linux versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If executed with elevated privileges (e.g., via sudo) in an environment with a manipulated $PATH, an attacker with root/sudo privileges could cause malicious executables to run instead of intended system binaries. This can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges.

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition.

A SQL injection vulnerability has been discovered in SourceCodester Interview Management System up to version 1.0, specifically in the file /addCandidate.php. Manipulation of the candName argument results in SQL injection. The attack can be launched remotely. The exploit has been released publicly and may be exploited.

Smart School 7.0 has a Stored Cross-Site Scripting (XSS) vulnerability due to lack of proper validation of user input when sending a POST request to '/online_admission', affecting parameters 'firstname', 'lastname', 'guardian_name' and others. This could allow a remote user to send a specially crafted query to an authenticated user and steal their session cookie details.

A SQL injection vulnerability has been identified in SourceCodester Baby Care System 1.0, specifically in the file /updatewelcome.php?id=siteoptions&action=welcome. Manipulation of the roleid argument leads to SQL injection. The attack can be launched remotely. The exploit is publicly available and might be used.

A SQL Injection vulnerability was determined in SourceCodester Baby Care System 1.0 in /admin.php?id=inbox via manipulation of the msgid argument. The attack can be initiated remotely and a public exploit is available.

A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /routers/edit-orders.php. Manipulation of the ID argument results in SQL injection. The attack can be launched remotely. The exploit has been made public and could be used.

A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /view-ticket.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

A SQL injection vulnerability has been identified in SourceCodester Farm Management System 1.0 in the /review.php file via manipulation of the pid argument. The attack can be performed remotely, and the exploit has been publicly disclosed.

A missing authorization vulnerability was identified in rymcu forest in the GlobalResult function of src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The attack can be initiated remotely. The product uses a rolling release model, so no specific version information is available.

A vulnerability in OpenClinica Community Edition up to 3.12.2/3.13 affects an unknown part of the file /ImportCRFData?action=confirm of the CRF Data Import component. Manipulating the xml_file argument results in path traversal. The attack can be initiated remotely, and the exploit has been made public.

A vulnerability in OpenClinica Community Edition up to 3.12.2/3.13 affects some unknown functionality of the file /ImportCRFData?action=confirm of the CRF Data Import component. Manipulating the xml_file argument leads to xml injection. The attack can be launched remotely, and the exploit has been disclosed to the public.

In 70mai X200 up to version 20251019, there is a file inclusion vulnerability in the Init Script Handler component. The attack requires local access and is difficult to exploit, but the exploit is public.

A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the Backend component. The manipulation of the argument Name leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed to the public and may be used.

A flaw was found in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/roomdel.php. Manipulating the ID argument enables remote attacks. The exploit has been published and may be used.

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Saphali LiqPay for donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saphali_liqpay' shortcode in all versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' functionality in all versions up to, and including, 2.5.4. This makes it possible for authenticated attackers with Administrator-level access and above to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

The Quick Featured Images plugin for WordPress is vulnerable to SQL Injection via the 'delete_orphaned' function in all versions up to and including 13.7.3 due to insufficient escaping and lack of preparation on the SQL query. This allows authenticated attackers with Editor-level access and above to append additional SQL queries, provided they can convince an author-level user or higher to add a malicious custom field value.