CVE Vulnerability Catalog

A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the editid argument in the /admin/edit-services.php file leads to SQL injection, which can be initiated remotely.

A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the 'id' argument in the /admin/edit_category.php file leads to SQL injection.

A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the asset src parameter.

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.

A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability using specially crafted programs that can run on the installed zenon hosts.

A flaw was found in libvirt where the virStoragePoolObjListSearch function does not return a locked pool as expected, leading to a race condition and denial of service when attempting to lock the same object from another thread.

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. A local attacker may trick the user into opening a specially crafted file, leading to an out-of-bounds read error and potentially causing the application to crash.

A flaw was found in the Quay registry, which involves a lack of validation for image labels coming from images. While labels created through Quay are validated, labels from images are not subjected to the same validation, allowing an attacker to publish a malicious image.

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects and results from improper locking when performing operations on an object.

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

The Auto Location for WP Job Manager plugin before version 1.1 does not sanitize and escape some of its settings, which could allow high privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The All-in-one Floating Contact Form WordPress plugin before version 2.1.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The vulnerability related to improper input validation in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations in OTRS Generic Interface modules allows any authenticated attacker to perform a host header injection for the ContentType header of the attachment.

An improper privilege check in the OTRS ticket move action in the agent interface allows any authenticated attacker to perform a move of a ticket without the needed permission.

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent.

A critical vulnerability was found in phpscriptpoint Car Listing version 1.6, affecting unknown processing of the /search.php file of the GET Parameter Handler component. Manipulation of arguments such as brand_id, model_id, car_condition, car_category_id, body_type_id, fuel_type_id, transmission_type_id, year, mileage_start, mileage_end, country, state, city leads to SQL injection.

A critical vulnerability has been found in phpscriptpoint BloodBank 1.1, affecting an unknown function of the file /search of the POST Parameter Handler component. Manipulation of the arguments country/city/blood_group_id leads to SQL injection.

A critical vulnerability was found in OpenRapid RapidCMS up to version 1.3.1, affecting unknown code in the file /admin/upload.php. Manipulation of the 'file' argument leads to unrestricted file uploads.