CVE Vulnerability Catalog

Podatność CVE-2025-6075 dotyczy funkcji os.path.expandvars(), która może powodować spadek wydajności, jeśli wartość przekazana do tej funkcji jest kontrolowana przez użytkownika. W takim przypadku, podczas rozwijania zmiennych środowiskowych, może wystąpić degradacja wydajności.

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.

The Analytify Pro plugin for WordPress (versions up to and including 7.0.3) is vulnerable to Sensitive Information Exposure via the Analytify Tag HTML details. This allows unauthenticated attackers to extract usernames from the source code.

In Afterlogic Aurora webmail version 9.8.3 and below, there is an XSS vulnerability. An attacker can send a crafted HTML email with JavaScript in an img tag, allowing arbitrary code execution in the user's browser and access to data.

Nagios XI versions prior to 2024R1.1 are vulnerable to cross-site scripting (XSS) when a user visits the 'missing page' (404) page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker to craft a malicious link that, when visited by a victim, executes arbitrary JavaScript in the victim's browser within the Nagios XI domain.

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions, to view partial user credential data.

The ERI File Library plugin for WordPress up to version 1.1.0 is vulnerable to unauthorized access of data due to a missing capability check on the 'erifl_file' AJAX action. Unauthenticated attackers can download files restricted to specific user roles.

The Depicter plugin for WordPress up to version 4.0.4 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the depicter-document-rules-store function. This allows unauthenticated attackers to modify document rules via a forged request if they can trick a site administrator into clicking a link.

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known.

The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'tec_qr_code_modal' AJAX endpoint in all versions up to and including 6.15.9. This allows authenticated attackers with Subscriber-level access and above to view draft event names and generate/view QR codes for them.

The OOPSpam Anti-Spam plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to and including 1.2.53. The plugin trusts client-controlled forwarded headers (e.g., CF-Connecting-IP, X-Forwarded-For) without verifying they originate from trusted proxies, allowing unauthenticated attackers to spoof their IP address.

The Zombify plugin for WordPress up to version 1.7.5 is vulnerable to Path Traversal due to insufficient input validation in the zf_get_file_by_url function. This allows authenticated attackers with subscriber-level access or above to read arbitrary files on the server, including sensitive system files like /etc/passwd, via a forged request. Successful exploitation relies on a race condition as the generated file is deleted immediately.

The RealPress WordPress plugin before version 1.1.0 registers REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site.

The FuseWP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_changes() function in all versions up to 1.1.23.0. This makes it possible for unauthenticated attackers to add and edit sync rules.

The Qzzr Shortcode plugin for WordPress up to version 1.0.1 is vulnerable to Stored Cross-Site Scripting via the 'quiz' attribute in the 'qzzr' shortcode due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts.

In Brave Browser Desktop before 1.83.10 with split view enabled, the 'Open Link in Split View' context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on cross-site navigation.

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the Revive Adserver UI into clicking a crafted URL and execute injected JavaScript in the victim's browser context. The vulnerability is present in admin-search.php and can be exploited via the compact parameter.

Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value.

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu). An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a victim views the affected page the injected script executes in the victim's browser context.

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged users to remove dashboards that affect other users or the overall monitoring UI.