CVE Vulnerability Catalog

desknet's NEO versions V4.0R1.0 to V9.0R2.0 contain a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.

ChatLuck contains a cross-site scripting (XSS) vulnerability in the Guest User Sign-up feature. If exploited, an arbitrary script may be executed in the web browser of the user accessing the product.

ChatLuck contains an insufficient granularity of access control vulnerability in the Invitation of Guest Users feature. If exploited, an uninvited guest user may register itself as a guest user.

A data corruption vulnerability in the luksmeta utility for LUKS1 allows overwriting encrypted data by writing excessive metadata. Lack of space validation leads to permanent loss of user data.

A vulnerability in the Snort 3 HTTP Decoder due to a buffer handling error when parsing MIME fields of the HTTP header can result in a buffer under-read. An unauthenticated remote attacker can send crafted HTTP packets to cause information disclosure or a crash of the Snort 3 Detection Engine.

A flaw was found in Samba's vfs_streams_xattr module where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.

The Binary MLM Plan plugin for WordPress is vulnerable to limited privilege escalation in versions up to and including 3.0. The bmp_user role grants all users with manage_bmp capability by default upon registration.

Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.

An authenticated command injection vulnerability exists in the CLI of AOS-10 GW and AOS-8 Controllers/Mobility Conductor. Exploitation requires physical access. A successful attack could allow arbitrary command execution as a privileged user.

A reflected XSS vulnerability in FortiOS, FortiProxy, and FortiSASE allows an unauthenticated attacker to execute scripts in a victim's browser via crafted HTTP requests. The issue stems from improper input neutralization during web page generation.

An Insufficient Session Expiration vulnerability (CWE-613) in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, and 6.4 all versions may allow a remote attacker (e.g., a former admin whose account was removed and session terminated) in possession of the SAML record of a user session to access or re-open that session via re-use of the SAML record.

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

Vulnerability in SAP S/4HANA (Manage Processing Rules - For Bank Statements) allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tampering the request parameter. Due to missing authorization check, the attacker can delete shared rule conditions that should be restricted, compromising the integrity of the application without affecting its confidentiality or availability.

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.

A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A SQL injection vulnerability was identified in SourceCodester Simple Inventory System 1.0, specifically in the /user.php file. Manipulation of the 'uemail' argument allows injection of malicious SQL code. The attack can be carried out remotely, and the exploit is publicly available.

A vulnerability was discovered in code-projects E-Commerce Website 1.0 involving SQL injection in the file /pages/product_add_qty.php. Manipulation of the prod_id argument allows remote attack execution. The exploit is publicly available and may be used.

The Page Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the admin_process_widget_page_change function. This makes it possible for unauthenticated attackers to modify widget page block configurations via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.10. Missing nonce validation on multiple AJAX actions allows unauthenticated attackers to modify plugin settings and create verification files via forged requests.

Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.